Edit tour

Windows Analysis Report
https://forms.gle/sxFUT7YRxjaFsuNq6

Overview

General Information

Sample URL:	https://forms.gle/sxFUT7YRxjaFsuNq6
Analysis ID:	1538462
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5924 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3244 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2524,i,986314333724332850,16836519362287794161,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://forms.gle/sxFUT7YRxjaFsuNq6" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.32:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.164.15:443 -> 192.168.2.4:51413 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:51414 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:51415 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:51416 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:51419 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:51412 -> 162.159.36.2:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: forms.gle to https://docs.google.com/forms/d/e/1faipqlseosl99tyv3kv8jimuimrerzjxw_h7xxrefcfbjnsdmd-scja/viewform?usp=send_form

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.164.15
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.164.15

Source: global traffic	HTTP traffic detected: GET /sxFUT7YRxjaFsuNq6 HTTP/1.1Host: forms.gleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/viewform?usp=send_form HTTP/1.1Host: docs.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /B-vjoRYNSIlQl8HAsCemiW6akJ2yHBC4b2EoA2G3HKhmVs2CcpaqCpP35m7VNUTdetN_2n66_fMVg5s9CuDEBvQYkeP5IkOVv7IwxdcjVEC_JCG9ElXIY26bHMO1MWo2zA=w1200 HTTP/1.1Host: lh4.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /B-vjoRYNSIlQl8HAsCemiW6akJ2yHBC4b2EoA2G3HKhmVs2CcpaqCpP35m7VNUTdetN_2n66_fMVg5s9CuDEBvQYkeP5IkOVv7IwxdcjVEC_JCG9ElXIY26bHMO1MWo2zA=w1200 HTTP/1.1Host: lh4.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/font/getmetadata HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: S=spreadsheet_forms=g30FHL1t_D4lRnpGzJDx8jNEVbHITGCtpH_nD9q39A8; COMPASS=spreadsheet_forms=CjIACWuJV5OVrjCVPU0cvRjOgMYHeXD-JL08g72j8BIVcidKH18iK0CGAnQxoB0tCboSchDRzNi4Bho0AAlriVcyYGeNgQLJiOUBrqTURjl_CwsshAOFhsFwT2_jBUAEkDRrKETr31T9TEr2qo55Jw==; NID=518=bxHt4WO5_sV29nt4rFTs_OEeUQyEqyvXGhS0B8Fg_7gAdzbAudnn8jqiMcSuT6QmrDiKii4IeingYHtdLROTeMeo97Cw4HChmYa_ejcC71WT10bPP9ptFK_8qVl4SR5PV3Pr3zibCr8-qHMRBaUgpMejFZ-gakVkySrDRSRfJsx0_OeMI6WQv8O7Cg
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=bxHt4WO5_sV29nt4rFTs_OEeUQyEqyvXGhS0B8Fg_7gAdzbAudnn8jqiMcSuT6QmrDiKii4IeingYHtdLROTeMeo97Cw4HChmYa_ejcC71WT10bPP9ptFK_8qVl4SR5PV3Pr3zibCr8-qHMRBaUgpMejFZ-gakVkySrDRSRfJsx0_OeMI6WQv8O7Cg
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=bxHt4WO5_sV29nt4rFTs_OEeUQyEqyvXGhS0B8Fg_7gAdzbAudnn8jqiMcSuT6QmrDiKii4IeingYHtdLROTeMeo97Cw4HChmYa_ejcC71WT10bPP9ptFK_8qVl4SR5PV3Pr3zibCr8-qHMRBaUgpMejFZ-gakVkySrDRSRfJsx0_OeMI6WQv8O7Cg
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cS9AprGcEg7pCdO&MD=KDLXwNkd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /clientwebservice/ping HTTP/1.1Connection: Keep-AliveUser-Agent: DNS resiliency checker/1.0Host: fe3cr.delivery.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sls/ping HTTP/1.1Connection: Keep-AliveUser-Agent: DNS resiliency checker/1.0Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cS9AprGcEg7pCdO&MD=KDLXwNkd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cS9AprGcEg7pCdO&MD=KDLXwNkd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: chromecache_159.2.dr, chromecache_153.2.dr

String found in binary or memory: Nf=w(["https://sandbox.google.com/tools/feedback/"]),Of=w(["https://www.google.cn/tools/feedback/"]),Pf=w(["https://help.youtube.com/tools/feedback/"]),Qf=w(["https://asx-frontend-staging.corp.google.com/inapp/"]),Rf=w(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Sf=w(["https://localhost.corp.google.com/inapp/"]),Tf=w(["https://localhost.proxy.googlers.com/inapp/"]),Uf=V(wf),Vf=[V(xf),V(yf)],Wf=[V(zf),V(Af),V(Bf),V(Cf),V(Df),V(Ef),V(Ff),V(Gf),V(Hf),V(If)],Xf=[V(Jf),V(Kf)],Yf= equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: forms.gle
Source: global traffic	DNS traffic detected: DNS query: docs.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: lh4.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: 15.164.165.52.in-addr.arpa

Source: unknown

HTTP traffic detected: POST /forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/naLogImpressions HTTP/1.1Host: docs.google.comConnection: keep-aliveContent-Length: 5335sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Same-Domain: 1Content-Type: application/x-www-form-urlencoded;charset=UTF-8sec-ch-ua-mobile: ?0X-Client-Deadline-Ms: 20000User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://docs.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.google.com/forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/viewform?usp=send_formAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: S=spreadsheet_forms=g30FHL1t_D4lRnpGzJDx8jNEVbHITGCtpH_nD9q39A8; COMPASS=spreadsheet_forms=CjIACWuJV5OVrjCVPU0cvRjOgMYHeXD-JL08g72j8BIVcidKH18iK0CGAnQxoB0tCboSchDRzNi4Bho0AAlriVcyYGeNgQLJiOUBrqTURjl_CwsshAOFhsFwT2_jBUAEkDRrKETr31T9TEr2qo55Jw==; NID=518=zMAsN-USReiBZWCmk_wUpgchwj_HoWndImrZCGPCatQyGStYpmyli9ar4YYyQN5MV47an_URnr_TNkXwBpapf71RxnTssEORYC1DMv3-HtFiZ6jJnROyBfN3mcZH5pZE4VNO8wvNPeimXIy_HilFro7ADMGf5Yvz5bSKSxZeM2D8Njuwaw

Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_153.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_153.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_153.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_174.2.dr, chromecache_104.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_178.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialiconsextended/v151/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvJ.woff
Source: chromecache_174.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVE9eOcEg.woff2)
Source: chromecache_174.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVF9eO.woff2)
Source: chromecache_174.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVFNeOcEg.woff2)
Source: chromecache_174.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVGdeOcEg.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_104.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_153.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_134.2.dr, chromecache_139.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_106.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_134.2.dr, chromecache_139.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/common/cleardot.gif
Source: chromecache_134.2.dr, chromecache_139.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/forms/draft_responses_onboarding.png
Source: chromecache_153.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_134.2.dr, chromecache_139.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_153.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_123.2.dr, chromecache_106.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_134.2.dr, chromecache_139.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_153.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_159.2.dr, chromecache_153.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_153.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_134.2.dr, chromecache_139.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_153.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_153.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_134.2.dr, chromecache_139.2.dr	String found in binary or memory: https://youtube.com/embed/
Source: chromecache_134.2.dr, chromecache_139.2.dr	String found in binary or memory: https://youtube.com/embed/?rel=0

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 51571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51480 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51427 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 51490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51469
Source: unknown	Network traffic detected: HTTP traffic on port 51549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51469 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51463
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51461
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51462
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51467
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51468
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51465
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51466
Source: unknown	Network traffic detected: HTTP traffic on port 51512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51470
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51471
Source: unknown	Network traffic detected: HTTP traffic on port 51478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 51550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 51523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51474
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51475
Source: unknown	Network traffic detected: HTTP traffic on port 51435 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51472
Source: unknown	Network traffic detected: HTTP traffic on port 51506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51477
Source: unknown	Network traffic detected: HTTP traffic on port 51544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51481
Source: unknown	Network traffic detected: HTTP traffic on port 51473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51482
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51480
Source: unknown	Network traffic detected: HTTP traffic on port 51446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 51440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 51463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 51434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51485
Source: unknown	Network traffic detected: HTTP traffic on port 51505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51486
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51483
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51484
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51489
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51487
Source: unknown	Network traffic detected: HTTP traffic on port 51562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51488
Source: unknown	Network traffic detected: HTTP traffic on port 51528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51492
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51490
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51491
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 51533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51496
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51497
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51495
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51499
Source: unknown	Network traffic detected: HTTP traffic on port 51511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 51423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51427
Source: unknown	Network traffic detected: HTTP traffic on port 51488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51428
Source: unknown	Network traffic detected: HTTP traffic on port 51465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51425
Source: unknown	Network traffic detected: HTTP traffic on port 51442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51546
Source: unknown	Network traffic detected: HTTP traffic on port 51574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51426
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51429
Source: unknown	Network traffic detected: HTTP traffic on port 51459 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51420
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51541
Source: unknown	Network traffic detected: HTTP traffic on port 51436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51423
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51424
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51421
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51542
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51413 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51422
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51543
Source: unknown	Network traffic detected: HTTP traffic on port 51545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51438
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51559
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51439
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51436
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51437
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51430
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51550
Source: unknown	Network traffic detected: HTTP traffic on port 51431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51434
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51555
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51435
Source: unknown	Network traffic detected: HTTP traffic on port 51540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51432
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51553
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51433
Source: unknown	Network traffic detected: HTTP traffic on port 51527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51554
Source: unknown	Network traffic detected: HTTP traffic on port 51477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51551 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51425 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51449
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51447
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51569
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51441
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51560
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51561
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51446
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51567
Source: unknown	Network traffic detected: HTTP traffic on port 51430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51443
Source: unknown	Network traffic detected: HTTP traffic on port 51509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51444
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51565
Source: unknown	Network traffic detected: HTTP traffic on port 51510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51570
Source: unknown	Network traffic detected: HTTP traffic on port 51483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51447 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 51464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51458
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51459
Source: unknown	Network traffic detected: HTTP traffic on port 51521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51452
Source: unknown	Network traffic detected: HTTP traffic on port 51458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51453
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51450
Source: unknown	Network traffic detected: HTTP traffic on port 51472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51571
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51451
Source: unknown	Network traffic detected: HTTP traffic on port 51504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51456
Source: unknown	Network traffic detected: HTTP traffic on port 51563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51457
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51454
Source: unknown	Network traffic detected: HTTP traffic on port 51546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51575
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51455
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51460
Source: unknown	Network traffic detected: HTTP traffic on port 51515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51502
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51507
Source: unknown	Network traffic detected: HTTP traffic on port 51541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51501
Source: unknown	Network traffic detected: HTTP traffic on port 51564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51449 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51514
Source: unknown	Network traffic detected: HTTP traffic on port 51569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51519
Source: unknown	Network traffic detected: HTTP traffic on port 51466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51518
Source: unknown	Network traffic detected: HTTP traffic on port 51470 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51512
Source: unknown	Network traffic detected: HTTP traffic on port 51414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51510
Source: unknown	Network traffic detected: HTTP traffic on port 51498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51415 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51526
Source: unknown	Network traffic detected: HTTP traffic on port 51547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51529
Source: unknown	Network traffic detected: HTTP traffic on port 51520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51521
Source: unknown	Network traffic detected: HTTP traffic on port 51476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51416
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51414
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51415
Source: unknown	Network traffic detected: HTTP traffic on port 51437 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51419
Source: unknown	Network traffic detected: HTTP traffic on port 51493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51413
Source: unknown	Network traffic detected: HTTP traffic on port 51508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51534
Source: unknown	Network traffic detected: HTTP traffic on port 51525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51532
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51570 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.32:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.164.15:443 -> 192.168.2.4:51413 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:51414 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:51415 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:51416 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:51419 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@17/188@18/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2524,i,986314333724332850,16836519362287794161,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://forms.gle/sxFUT7YRxjaFsuNq6"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2524,i,986314333724332850,16836519362287794161,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Link
s-part-0017.t-0009.t-msedge.net	0%	Virustotal	Browse
docs.google.com	0%	Virustotal	Browse
play.google.com	0%	Virustotal	Browse
forms.gle	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://localhost.corp.google.com/inapp/	0%	URL Reputation	safe
http://localhost.corp.google.com/inapp/	0%	URL Reputation	safe
https://feedback.googleusercontent.com/resources/annotator.css	0%	URL Reputation	safe
https://apis.google.com/js/client.js	0%	URL Reputation	safe
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
http://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	0%	URL Reputation	safe
https://support.google.com/inapp/%	0%	URL Reputation	safe
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	0%	URL Reputation	safe
https://help.youtube.com/tools/feedback/	0%	URL Reputation	safe
https://asx-frontend-staging.corp.google.com/tools/feedback/	0%	URL Reputation	safe
https://support.google.com/	0%	URL Reputation	safe
https://scone-pa.clients6.google.com	0%	URL Reputation	safe
https://support.google.com/inapp/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/inapp/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.com/tools/feedback/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.youtube.com/tools/feedback/	0%	URL Reputation	safe
https://feedback2-test.corp.google.com/inapp/%	0%	URL Reputation	safe
https://sandbox.google.com/inapp/%	0%	URL Reputation	safe
https://feedback2-test.corp.googleusercontent.com/inapp/%	0%	URL Reputation	safe
https://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://www.google.cn/tools/feedback/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.de/inapp/	0%	URL Reputation	safe
https://www.google.cn/tools/feedback/%	0%	URL Reputation	safe
https://feedback2-test.corp.google.com/tools/feedback/%	0%	URL Reputation	safe
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.de/tools/feedback/	0%	URL Reputation	safe
https://sandbox.google.com/inapp/	0%	URL Reputation	safe
https://test-scone-pa-googleapis.sandbox.google.com	0%	URL Reputation	safe
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.com/inapp/	0%	URL Reputation	safe
https://feedback.googleusercontent.com/resources/render_frame2.html	0%	URL Reputation	safe
https://sandbox.google.com/tools/feedback/%	0%	URL Reputation	safe
https://sandbox.google.com/tools/feedback/	0%	URL Reputation	safe
https://localhost.corp.google.com/inapp/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.youtube.com/inapp/	0%	URL Reputation	safe
https://feedback-pa.clients6.google.com	0%	URL Reputation	safe
https://asx-frontend-staging.corp.google.com/inapp/	0%	URL Reputation	safe
https://fonts.google.com/license/googlerestricted	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
docs.google.com	142.250.185.206	true	false	0%, Virustotal, Browse	unknown
play.google.com	142.250.185.142	true	false	0%, Virustotal, Browse	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	0%, Virustotal, Browse	unknown
forms.gle	199.36.158.100	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.186.68	true	false		unknown
googlehosted.l.googleusercontent.com	142.250.181.225	true	false		unknown
15.164.165.52.in-addr.arpa	unknown	unknown	false		unknown
lh4.googleusercontent.com	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Reputation
https://forms.gle/sxFUT7YRxjaFsuNq6	false	unknown
https://lh4.googleusercontent.com/B-vjoRYNSIlQl8HAsCemiW6akJ2yHBC4b2EoA2G3HKhmVs2CcpaqCpP35m7VNUTdetN_2n66_fMVg5s9CuDEBvQYkeP5IkOVv7IwxdcjVEC_JCG9ElXIY26bHMO1MWo2zA=w1200	false	unknown
https://docs.google.com/forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/viewform	false	unknown
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	unknown
https://docs.google.com/forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/viewform?usp=send_form	false	unknown
https://docs.google.com/forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/naLogImpressions	false	unknown
https://docs.google.com/forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/font/getmetadata	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://localhost.corp.google.com/inapp/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://youtube.com/embed/?rel=0	chromecache_134.2.dr, chromecache_139.2.dr	false		unknown
https://apis.google.com/js/client.js	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://support.google.com	chromecache_134.2.dr, chromecache_139.2.dr	false	URL Reputation: safe	unknown
https://play.google.com	chromecache_134.2.dr, chromecache_139.2.dr	false		unknown
https://youtube.com/embed/	chromecache_134.2.dr, chromecache_139.2.dr	false		unknown
http://localhost.proxy.googlers.com/inapp/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/inapp/%	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://help.youtube.com/tools/feedback/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-staging.corp.google.com/tools/feedback/	chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/	chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_134.2.dr, chromecache_139.2.dr	false		unknown
https://scone-pa.clients6.google.com	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/inapp/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.google.co.uk/inapp/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.google.com/tools/feedback/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://feedback2-test.corp.google.com/inapp/%	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback	chromecache_153.2.dr	false		unknown
https://sandbox.google.com/inapp/%	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://feedback2-test.corp.googleusercontent.com/inapp/%	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://localhost.proxy.googlers.com/inapp/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback/	chromecache_159.2.dr, chromecache_153.2.dr	false		unknown
https://www.google.cn/tools/feedback/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.google.de/inapp/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://www.google.cn/tools/feedback/%	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback/help_panel_binary.js	chromecache_153.2.dr	false		unknown
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_123.2.dr, chromecache_106.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://sandbox.google.com/inapp/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://test-scone-pa-googleapis.sandbox.google.com	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_106.2.dr	false		unknown
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://sandbox.google.com/tools/feedback/%	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://sandbox.google.com/tools/feedback/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://localhost.corp.google.com/inapp/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.youtube.com/inapp/	chromecache_159.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://feedback-pa.clients6.google.com	chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-staging.corp.google.com/inapp/	chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback/%	chromecache_159.2.dr, chromecache_153.2.dr	false		unknown
https://fonts.google.com/license/googlerestricted	chromecache_174.2.dr, chromecache_104.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.206	docs.google.com	United States	15169	GOOGLEUS	false
199.36.158.100	forms.gle	United States	15169	GOOGLEUS	false
142.250.181.225	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.142	play.google.com	United States	15169	GOOGLEUS	false
142.250.184.225	unknown	United States	15169	GOOGLEUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
172.217.18.110	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1538462
Start date and time:	2024-10-21 10:59:50 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://forms.gle/sxFUT7YRxjaFsuNq6
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@17/188@18/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 66.102.1.84, 142.250.186.78, 34.104.35.123, 142.250.181.234, 216.58.212.163, 142.250.186.67, 172.217.18.3, 142.250.185.227, 172.217.18.10, 142.250.186.138, 142.250.185.170, 142.250.185.106, 142.250.186.42, 142.250.185.138, 172.217.16.138, 142.250.185.234, 216.58.206.42, 142.250.184.234, 142.250.74.202, 216.58.212.170, 142.250.185.74, 142.250.186.74, 142.250.185.202, 142.250.184.195, 2.19.126.137, 192.229.221.95, 142.250.184.227
Excluded domains from analysis (whitelisted): fonts.googleapis.com, ssl.gstatic.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, www.gstatic.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://docs.google.com/forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/viewform Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://docs.google.com/forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/viewform Model: claude-3-haiku-20240307	```json { "brands": [] }
	```json { "brands": [] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1664, version 1.0
Category:	downloaded
Size (bytes):	1664
Entropy (8bit):	7.800722707795522
Encrypted:	false
SSDEEP:	48:b9Xwld63PE6EdXkGPFNZJxN2wwNL+vDpiD63DU6dvhuR:BHqXkG9v9wNL2iuTUgAR
MD5:	F19AC4E354F2BCE2E6341B804767E11A
SHA1:	A197ACF3FA097BFBAD358400BD07EAD8865F6FCC
SHA-256:	A631F36B97689FFB94AFDAEF8032E78479D469894A2B18F007DEA806DC1172B3
SHA-512:	F923634378A4236509C4F2C0514D4FA23B4DE4A28E24CB29EDAE81CA9204A9A8DACCC0621FA440FBE193AF51F4B72CF467229C04FC8240EFF2517D2B679D454D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/comfortaa/v45/1Pt_g8LJRfWJmhDAuUsSQamb1W0lwk4S4WjMDrUfIA.woff2
Preview:	wOF2...................#.........................2..r.V.`?STAT..\|....T.c....6.$.6. ..h.[...h.QTo&...`.XwB#4. E]=\|..7.s..NH..5.+P..B.g)..P....3.Q.n.<..Q..........5M..i).N.H.../..{.....D....P.V.e.j..R].(.U7...`... ..p....FG.........Jy...O..j...,..x5.V.r....t`@9.....#..#.8.....o...ikC9.R.LP.. ...4.hx.+.(WJ.R.b...y...+..-.T.H(b.@...;...9.AM......!.....=.b.e...C......E.HAV...B..H. .^.h...j-+o".Z9."...P'\9@....s,....o...J....,.<.....Y....R.-.G.\...x..Ya.;...P..DK;..(..........@.@&..#.9..l....'..w....x... ....-.y...Xh..y.....1.O.&.n.O..T.9.....b....V...L..jy8U...;..mj_.P.`C~.(W.........\......O=....0.!.....x.V.nA....b......A^\|..i t..m#$.\h.6B'...b.9....&d....zE...\|.L...P..".....+3U.....v\.aS.%."..B?.(\|.PO.`...*...T9..e....Gq.qn..3.L....3.R....L..w........D.m{...........q"..q.fKx\|.)4\..6.....x$_MC..m]:o.?6...0.X..G.e.c4G....{.9.......9.Y.9.53.l.Q5....;.._,.KS....By......J}.....z...'/~d8zm..P.e..a.9.f....F...fp...fm.F=P...P..M.N..H.i..k"2..~....\|.V.s$.Xd...&>[,..

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 45536, version 1.0
Category:	downloaded
Size (bytes):	45536
Entropy (8bit):	7.993627122085847
Encrypted:	true
SSDEEP:	768:KsRpGWzvLKRnz9VDn7HdJiBcMaaZgHq0CaDtDM/WcdvfoBhZYkQG:5Rp7eRfn7HdJiBDagwDZM/PVkhakv
MD5:	3C33061F3F982F2234262844D0FEE4CA
SHA1:	C4BB9DD654244A9EEBE0D6F12ED4C4E853B18252
SHA-256:	6504F1B88B6DE335A0FC2D1802EF8B000F6569792F509D4635128DC0915D6D70
SHA-512:	9EF8F96559F614C2BBFE33D0F385C0A7723E6E95DF9EDA30ABFB6CCE879E5F39E22138773D57749FC762F12EC23E11ACC9DA0B6F4D99CD0A39D50C8F56B10D4B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiukDV.woff2
Preview:	wOF2...............4...{..........................X...L..,.`?STATD..t.....@..Z..j..6.$..P. ..`..U..[...c.({...'&..!&F................6.uf..S.l.V...i.x.........].D.,..K..@...:un..7_....D..K-M.mJM#....m.mV.A..'...~l.4T1.4........iF..#d.......G~.....>.r:.r...NC+..U..75..6...g.wp7...............J-<.h%....i.P_......P.R......)....BS.9.m./..M.>@....1.(..?..,...._.y.....J'...RP/c.&B..J..h....X.C...UBG\|T.u+..e.I......[6...~...&...1.1..}......J..`....\?..aoZQ/lhL.}t@EH.y..ZA....HjP.g.%d..<.....v._L...]...`.a.#<. <...KS......I....t..@[V-...^.xe.&...n@do.Y"....%T@p0..Xp..........>.}....7...D<.M.......ID...m%.A2....[a............j..;IJZ.....L.e.Kyd5"....OO8S.AR...~.c)....A.8..?8...RW....{..>..P(z.4.+............#/.....9..j........`..N{h/tb...^.....t:c.57u[...`E.f..\..~.......D..UQ..~..x.hJ.H....Z.F.B~..S...[...q..-f).....mP....l.E..#.R...[...0I...0...h.eyGzu........_...Uw...Cr....+.B..9.&....~~.g..Z..y...^.p .i....$...,...$..Mm9.m.i&....n'.n`]......y..c:B;.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1748, version 1.0
Category:	downloaded
Size (bytes):	1748
Entropy (8bit):	7.840525971879245
Encrypted:	false
SSDEEP:	48:TkXOQ7jX7K03LmuPpXa0xo0LdsiYeVsVo1Y/Urwn:uOOXW03LmWpXa0xo0SiYusVaQ
MD5:	6DBF91A51C653C0BA098FED5B34ACC55
SHA1:	599EBB3EE593F5C381AF2429993AF2FD01610C0F
SHA-256:	39DBC90B7B4C41925E680E6EA13E84E975E936AA8DE9B04A8C401A332FBDE393
SHA-512:	61FF9094CF2248DB64F8E5B665F096E76DA8DAAFD8939E0B4AF0B147BD43F848D201779B079F1F486EAB8C1F9BF3192443B6BBEC1D80B76D2227C446569203E5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5GxK.woff2
Preview:	wOF2...................x..............................4.`.f.T..<......G......6.$. . ..t. ..I......m;...$I9I=c>...Xo./M54k.I%2.@...%....].P...!......R.I.(>3.W:3.8....L.\|7...B..{S..........E$....N0F.S-...5...H.S.....(.......R..q.%..p./.....X'....z.......csz...i8...3b..@/..q..0x..@....}...N.._.5$..!ympz.6.........zL....x.!.}...q...B..Q.a.2....y.....Y{=.Q.g....m%2..k.7/G.g.o..L~ ..J.?/p..E^.l.J..+30..=4.=.......@..0..p.m..(..iH..a+\|...7!..<3.0."A.v.......&.l]....,G.)..R.CI..KY.\B........fU.....)..b+..S..L1k.]..n.iXq]}c.2.K..t\...B.c.]G......I..9.+fT.U.....=.n9B..s..n.[Q.TXg,]..=m....L.~..Y.%l..\.HM...r..5S9.<.....%\C..._5.6e....1G..Q\.M.....4."R...J..C.".L..!z..d......08MozlZ./F^.E........x.Nk....#eTn&.Q.PK.)..H..=&....@...\..(..w...{)I.y)..j....e.u...}g...tZ...q.y.X.5....{.........0.eQ.R....7.2..Q.2.....~.u2.S.JyE.}FJW.4..+K............o$&6......j.E.5....~\|.%5.H.;...eS.....o.._...5..v.]_..g..;. g.&........./....#qU. ....w..o.v..[..y..2......])

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 39708, version 1.0
Category:	downloaded
Size (bytes):	39708
Entropy (8bit):	7.995101602136828
Encrypted:	true
SSDEEP:	768:XjiVPi/ZA7fGoYMkVufW8T9OEHrl0GzAh6vGiMZzd4c7ugMgaczhZI9mxhc:Xjj/6jGo9k0e8ZVl0GzAh8+zdzH7bI99
MD5:	F311A35802EF8FA61FA06206EF76278C
SHA1:	6179B813223849FAEB0835B285A05E5B2A8A4AD4
SHA-256:	FF8C9A38C906236A4025B752DA6A83403DF53F22F0FB8B88155B7B04A5229904
SHA-512:	44459C9D934891747B017A83489905325CA9CA5BD4232953AA4AF6770553930C8D2844115650E3FD5415971454DE866EF57EECF7C4ADFB1F1002601412A78390
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Ew7.woff2
Preview:	wOF2.....................................................T.`?STATH..j........7..`..6.$..<. ..X..0..[.~..I.~+.H..)&y..a..\16.........`.^...@..6........IE.L3I;a.@..(..!..{d7a...]A_1`.(..\|....0..9b.Z...`u6.CT..w..w....`..?..q..?.....e.....H_.~...z......\|.P...J..m...W.."..f.%...D..ew..&...?QJF...a.f...&.,.Q.r.....L....D....-2/..a.{....A..M.....2k.7..&.5.d.#....z....a.<. \|!..CfVV.>8s+......K.fZ.Z..H....\.[..u....d....E........J...s..so..yg.-.....R.o../[.D.8....].&r}.H..$_..........9......\...I...;@....fA..u..I] .#........s.[....D.z.vd.B.-4.....7.#./.oe./iY.o.D!;;...mv..&a..J(J.E......L...M]....t.........m.+7YD..i.6.>i.*..&!!. .%@. .R.jJm.NO.....vj..u;1..Sk.........L#......k..Q....p....W..^..%Nx..'q..~....Y.z2.U=A.Rh$..h..f..w......s..r,......Z...m.3.I...u".!n.i......\|.w.[.g^.!....Y.1.O.7..i.@.p...zM.%c.!....e,.s......c..e..e......~.Z;MmB;1....J$.....Md.L"..mB..>&.R ......].r....0..l.... @X..l............u....kE.@.P.P._jy.Q.......A..@I....."

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	29649
Entropy (8bit):	5.545452104367033
Encrypted:	false
SSDEEP:	768:V/hSTO+MerX/+QBUHNieLZD4EFRPRYHBCu4utyiVVl:V/kTf
MD5:	2241684F5D8066C120792F3514BE8163
SHA1:	5FE694D0737BEB7C2661848FFEA58170952CDECF
SHA-256:	4B13C0BDCD4FEECF3B5CB1084A565C6800A7BCB38AAF6B2C8CAA9125E0635E89
SHA-512:	59F9430FDB880DD1748D8DDBAC515833C1C1E71AD3A3CD11092D85A72E1926700EF5867C9413E36CE8EC85046F707D781FD0BC4AA44EBD6FB3D96E9DE78A4BE1
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Google+Sans_old:400,500\|Roboto_old:300,400,400i,500,700&subset=latin,vietnamese,latin-ext,cyrillic,greek,cyrillic-ext,greek-ext"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1747)
Category:	downloaded
Size (bytes):	223421
Entropy (8bit):	5.612925401598316
Encrypted:	false
SSDEEP:	3072:QfHmk1sstphhDUVeI+IAO+yBJcyBKN081wNQAVoxIqw70V:ShQ4I+IAQJcyBAEoxIx70V
MD5:	50E71172EFBEFF3005C2FD7EE2228825
SHA1:	8F8F6DC17A62A8DA0F7500E3E976EBD0E41F715B
SHA-256:	DE800FE687E41957CD5A815F2CAF3BA1040EA386DCC402B4EBD4942F0F2AE83E
SHA-512:	8C37D6A85A4A8E73A6AFEB160D24F328E3015011A52B13BF9B5934BE90F09ABDC5F513722AF904CE804446183C919B34951C5F22305532518E52ECCBF5E4AAB8
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/freebird/_/js/k=freebird.v.en.5fAGSsMcBN8.O/am=MBg/d=0/rs=AMjVe6hbIiASzM4-32J5zX7utnFvaDiUcg/m=sy1m,vGOnYd,syi,syt,sys,IZT63,vfuNJf,MpJwZc,n73qwf,sya,ws9Tlc,sy5,sy6,sym,syl,syv,syc,syu,sy1f,sy1g,sy1d,sy1e,siKnQd,T8YtQb,sy12,sy10,sy11,sy15,sy1a,sy1u,sy43,sy16,sy1b,sy3z,sy42,sy44,V3dDOb,sy4t,sy4w,sy8y,sy8x,sy4u,sy8v,OShpD,sy7f,sy90,sy92,sy94,sy91,sy93,sy8w,sy8z,sy95,J8mJTc,gkf10d,j2YlP,sye,sy19,cEt90b,KUM7Z,yxTchf,syb,syd,xQtZb,qddgKe,syj,syn,sy4,syr,syz,sy13,wR5FRb,pXdRYb,iFQyKf,syw,syh,syx,YNjGDd,syy,sy14,PrPYRd,sy17,hc6Ubd,sy1j,SpsfSb,dIoSBb,sy1k,sy1l,zbML3c,zr1jrb,EmZ2Bf,sy1c,Uas9Hd,sy79,sybe,WO9ee,sy1i,sy1t,sy3v,sy3w,sy1h,sy3x,sy40,sy41,A4UTCb,syby,owcnme,UUJqVe,CP1oW,syf,NTMZac,mzzZzc,rCcCxc,CHCSlb,sy1r,sy4a,sy4b,sy47,sy48,sy49,sy4c,pxq3x,sy3t,sy3u,O6y8ed,sy1,sy7o,sy9g,sy5w,sy9d,sy9f,sy9a,sy9b,sy9m,sy9n,sy9j,sya8,Sk9apb,sy99,syd8,syda,syas,sydd,syde,sydf,sydg,Xhpexc,Q91hve,sy69,sy60,sy67,sy68,syan,sy6m,sy97,syai,syal,syao,syap,syaq,syar,syak,mRfQQ,sycy,sycx,CFa0o,szrus,sy1v,sy46,VXdfxd,syo,sy1o,sy1s,sy1p,sy1q,s39S4,sy1w,sy8,sy31,sy20,sy2z,sy30,sy6x,sy3c,sy3d,syc1,sy8p,PVlQOd,NPKaK,sy2r,sy32,sy3f,sy3n,sy3p,sybz,syc0,sy8q,sy2p,sy2y,sy39,sy3a,sy3m,sy3i,sy3k,sy3l,sy6l,BVgquf,syc3,sye0,sye9,fmklff,sy4e,ENNBBf"
Preview:	"use strict";this.default_v=this.default_v\|\|{};(function(_){var window=this;.try{._.Er(_.Ox);.}catch(e){_._DumpException(e)}.try{._.u("vGOnYd");.var tPb=function(){this.type=1;this.view=null},OY=function(a){_.Q.call(this,a.Ca)};_.D(OY,_.Q);OY.ya=_.Q.ya;OY.prototype.j=function(){return _.ms()};OY.prototype.start=function(){return new tPb};OY.prototype.cancel=function(){};OY.prototype.render=function(){return _.ns()};_.$t(_.oAa,OY);._.w();.}catch(e){_._DumpException(e)}.try{._.lIa=function(a){if(a==null)return a;if(typeof a==="string"){if(!a)return;a=+a}if(typeof a==="number")return Number.isFinite(a)?a>>>0:void 0};_.mIa=function(a,b,c){if(a!=null)if(typeof a==="string")a=a?new _.Wb(a,_.Jg):_.Kg();else if(a.constructor!==_.Wb)if(_.Xa(a))a=a.length?new _.Wb(c?a:new Uint8Array(a),_.Jg):_.Kg();else{if(!b)throw Error();a=void 0}return a};._.Rz=function(a){for(var b=[],c=0;c<arguments.length;c++){var d=arguments[c];if(Array.isArray(d))for(var e=0;e<d.length;e+=8192)for(var f=_.Rz.apply(null,_

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (562)
Category:	dropped
Size (bytes):	539605
Entropy (8bit):	5.5537600443409145
Encrypted:	false
SSDEEP:	6144:pwMsPSSM4VW39NiTJBhvC/NmF2t+CEaJxzSGxetJ3:pL4gNBJLZxo3
MD5:	8F931D99C3180329C64417CFD7F19FB2
SHA1:	CCCEA9AD3624065E7BF020B935DDFCA52C229C60
SHA-256:	2CBA087163D109C9CB9945531F196A91E3665E8634E7AE81287215BAD7A279F8
SHA-512:	6A65CF625A14DA2460CE430D9A8682B9F3B657F6C01855371EB73FE376EB087D55DEFC7118C2186B8B718F045BB61CF75623C02AE8921C22AB110C973E04A2F3
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_v=this.default_v\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x1830, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var ha,ka,baa,caa,daa,eaa,ra,faa,jaa,maa,oaa,taa,$a,ab,cb,vaa,waa,lb,mb,zaa,nb,ob,Aaa,Baa,tb,Faa,Gaa,wb,Jaa,Kaa,Laa,Haa,Ab,Oaa,Paa,Saa,Taa,Uaa,Vaa,Raa,Waa,Gb,Xaa,Qaa,Fb,Yaa,Zaa,$aa,bba,cba,eba,fba,hba,jba,lba,kba,nba,oba,pba,qba,rba,sba,Ub,tba,xba,yba,Aba,Bba,Cba,Dba,Eba,Fba,zba,Gba,Jba,Lba,Kba,Oba,Zb,Qba,Pba,Sba,Tba,Yba,Zba,dca,$ba,aca,ic,gca,ica,jca,gc,jc,kca,lca,mca,qca,tca,nca,sca,rca,pca,oca,u

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1136052
Entropy (8bit):	5.597155218194576
Encrypted:	false
SSDEEP:	12288:nCx5Y8fv6Nsh7r3WqXEHpfUWotIMUo+anijjGn8/jTez:nCx5cVjvjT6
MD5:	4A3B17AA45D2E572568FB33A53EF7161
SHA1:	8B254BDD916DE143EF9486A9666D7E301375CFFB
SHA-256:	843E11F0EAF717700DD05E8DAA74678A60F9AA3B39523698A0B0BAF5E3242D6D
SHA-512:	254031EF3B9740E3E7F8A27476A4679EC80FBB157EDF2A1F1474DC0D3BBF138C459F75BB49F5919FA5FE36D23F2266DBB600C0760998FBFAA43546C423F6924B
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/freebird/_/ss/k=freebird.v.xBj7MXV1RhA.L.W.O/am=MBg/d=1/rs=AMjVe6hjDDwfUrgm3hCEicdiE-sTgS56mA
Preview:	.tk3N6e-cXJiPb{-webkit-border-radius:2px;border-radius:2px;-webkit-box-shadow:0px 2px 4px rgba(0,0,0,.2);box-shadow:0px 2px 4px rgba(0,0,0,.2);-webkit-transition:all 0s linear 1s,opacity 1s;transition:all 0s linear 1s,opacity 1s;border-style:solid;border-width:0;font-size:11px;height:0;opacity:0;visibility:hidden;overflow:hidden;padding:0;text-align:center}.tk3N6e-cXJiPb-Tswv1b{background-color:#f9edbe;border-color:#f0c36d;color:#333}.tk3N6e-cXJiPb-u0pjoe{background-color:#484848;border-color:#202020;color:#fff}.tk3N6e-cXJiPb-EfADOe{background-color:#d6e9f8;border-color:#4d90f0;color:#333}.tk3N6e-cXJiPb-GMvhG{background-color:#dd4b39;border-color:#602019;color:#fff}.tk3N6e-cXJiPb-TSZdd{-webkit-transition:opacity 0.218s;transition:opacity 0.218s;border-width:1px;min-height:14px;height:auto;opacity:1;visibility:visible;padding:6px 16px}.tk3N6e-cXJiPb-yolsp.tk3N6e-cXJiPb-TSZdd{padding:2px 16px}.HB1eCd-X3SwIb-haAclf{font-weight:500;height:0;position:absolute;text-align:center;top:32px;widt

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 58892, version 1.0
Category:	downloaded
Size (bytes):	58892
Entropy (8bit):	7.995858140346243
Encrypted:	true
SSDEEP:	1536:zGRB4sZLebJD4gQL8CcWXYwk3V57Tt+5dLOj3aM:yRHZe94cCcWXYwCVrgdy7X
MD5:	386F2237074CC59495783195EA1F1295
SHA1:	81B3014B28B6E7EF2FDB39ED73D18EE38F1C36A5
SHA-256:	66A070C331573AA324FA2DEAC1A1B42B2D58E9660268555EE382D857E651E33F
SHA-512:	CEEF23D705E9D11C1FAD6D6704F2D1B3A59EE65B85CF240483484AE213E30DC2B59370BCD2FA61016256468A319B5033FB6F48C505BBCADA79B7489C1EA36CD3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5Ofg.woff2
Preview:	wOF2..............58.............................t..(..T.`..(.....m.....h........6.$..\|. ..r.....1[&.q.....uW..g.;.T.6....d..^!.X.r.C...\|...J....M2....x....P...M.@...1{.%....lJ..N.&..8..n.- ..a.c....~:...pa0a5Z...E.^...i.@M1pD.K..zb2Y]h..n.h....~.../...-..X.h7.J..TR%U2u...6..\|($)i`......<.,..5Ex.X#...w/r.....W..3.J.G....Pe....b.........Y2.~.i..fG.....gq...... ..9.x....?.S'}S.d.C..;..L.%..+....=.{...9C....,.D.s...F..)2B....T..h.H...H.U`..............Y8...q...%...e.++#+}...tv.^4D.$.....e......`?.^o...P.Y..q..0.L.../.......v...%.1...,2.L.(..~.............<......4/c..zIIW..;+Tlf...S...]..b.J:.NA:..A........f....R..A.Xa.Ph..Ii.......B...........J..i.j@..ZW.........IV.....P..`.+!.2.......d~..<$5...S....{....e..-..U......g.SH.}...........~........,.R.d....P..t.?..E.A,...UI...z7.7..x8.....0.. !.cs.~....U. .)..l..{>.DdS......6...]x....X.=.*.@....T..\..9?O......bD.`D........pYq.S.t..0lE...WP... Cc......lZ.C.....Cwp..V/....k.f^......b+

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37488, version 1.0
Category:	downloaded
Size (bytes):	37488
Entropy (8bit):	7.993533567842416
Encrypted:	true
SSDEEP:	768:esvocDJKJeW3cmJF3+1Xis/PjgqMLohr1C06HbC4V7:esvowKJl3c9iKP85kN1UbCe
MD5:	2A7652831C7699009E0C25DABF93430A
SHA1:	6B0A143D883AFB8FF3CA2BF55B448AF8B68F2F89
SHA-256:	C3525FCA875BF7203E92F116E0C5532DD5B5FE0F0CA5E12C6C4C8B9BD77566E2
SHA-512:	5AB58B2A6B9A39A2F14E824E9FA0005D2A615A95AD1496025C1DB67EB6B7F9F67ECA26EC96665EFDBCA86AEE237300714E52705777503DE1D0F6EFCFD4F21D0E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/comfortaa/v45/1Pt_g8LJRfWJmhDAuUsSQamb1W0lwk4S4WjMPrE.woff2
Preview:	wOF2.......p......................................p...r..r.`?STAT...6.....X..!..P..6.$.... ..h.....[.\|.E.bl.......nRU...9...s..9-...C)(..Z.....".d......!..i.i...6E....A..f.-G.dL...L,%.Q....,..Qs..........'.kF^.3,#w..!p..Z.z..~.?2./..^.... U%U..#.y:.f...Bg....G......y...eT......;..~BPZ.=..4R.Ti...nb.oG.r..j...P..J..u.....4M.<.).Y.K..i.S.E...%-...>b..(AqH.kv.@"......h.\|g'.F...T.....lM.c\..^.{.w..)M..$H9...&.}2a..I...v.fL...J.5...6.Y...(,.aO..`...?..M<.x....A..N..!"O.).zU.7=.S.V....{..p.t.\|.n...Y.......m.....G..a.R.PI..(i.......DZ.lb..`.`ba.5.Q W._...9..A..O....}2.&t.)-r.3.).n..N...v.-.;g.a.'.l...6...(..}.#....Va4..7..`.C..(...,.U...uQn.s....5....P....,...T 8..v.<...j........B'c....Ah4Ba$F.Y.sz.eD..?..w...N".......).o7...j.l../E.5...[J=..O\|s...r..5.C..^7.:m.Zy.`.......K./....}x.?.u..............mJI%..UhiRK..._..ME....-6.......)c.....2............?..X..D".#..}.........mh..nm;...r@r.~....i..@..?_R..x.*..Nm....p8..p.i........\._...P=.u...v..W..eCmw

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	199537
Entropy (8bit):	4.705288692920627
Encrypted:	false
SSDEEP:	3072:ybBsNrYiYbRTdY2kfzYjEBtluJZ0+gwZC0IoAl8oDkDsDvU/J6/J9/JDJVQjj1P:y
MD5:	53BB04865802E54AC8AF8A4B671BFA1A
SHA1:	C330354F2BD383D4A86E0CEB9E93539457E09215
SHA-256:	42E25531F7AAC9B4400C3C6E9ED2FF0B60F2972C79553CD09293EFC17B2335AA
SHA-512:	BB951E8EEE524C84B2E939F93B96E7E4808FE3F0781F769134A2687B0D0F5C9177C26CB0DF1CB65063630A69A87A73862613B11AD61A73DB468DB56431F182B9
Malicious:	false
Reputation:	low
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="26px" height="10682px" viewBox="0 0 26 10682" preserveAspectRatio="none"><g transform="translate(0,6738)"><path fill="#5F6368" d="M11 17h2v-4h4v-2h-4V7h-2v4H7v2h4Zm1 5q-2.075 0-3.9-.788-1.825-.787-3.175-2.137-1.35-1.35-2.137-3.175Q2 14.075 2 12t.788-3.9q.787-1.825 2.137-3.175 1.35-1.35 3.175-2.138Q9.925 2 12 2t3.9.787q1.825.788 3.175 2.138 1.35 1.35 2.137 3.175Q22 9.925 22 12t-.788 3.9q-.787 1.825-2.137 3.175-1.35 1.35-3.175 2.137Q14.075 22 12 22Zm0-2q3.35 0 5.675-2.325Q20 15.35 20 12q0-3.35-2.325-5.675Q15.35 4 12 4 8.65 4 6.325 6.325 4 8.65 4 12q0 3.35 2.325 5.675Q8.65 20 12 20Zm0-8Z"

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64164, version 1.0
Category:	downloaded
Size (bytes):	64164
Entropy (8bit):	7.995558995622934
Encrypted:	true
SSDEEP:	1536:yntrSMoymlBwHLjXFPrrBeqAk73lfzbqjWLHD5wU4z:1BB4LRjrBeqAClfzbqjEQz
MD5:	8C548F65E1DC239D9F8F4F3F52457E59
SHA1:	9A1F4B732127BB53F1F17EA6C905A886A456FD62
SHA-256:	1382DECC32857B4DC59FAAFDF57088D9F6917B18ECE82CC47F84010224008C05
SHA-512:	EB3B25CA9B4F01B96E08BDA238FFB704EB9D80DEB13CACFA246E27BF4686605A829EAB23D328ADFF1E03979306E95A30494EACD26BB13F3021CFF6C17DDAB5F5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/spectral/v13/rnCu-xNNww_2s0amA9M8qsHDafY.woff2
Preview:	wOF2..................>..........................F...>..".`..p..F..v.....0..y.....6.$.... ........J[....4..^...o..$....CL.@.@Q.....a........}G....mY..P;.U................O.R....lr..OP.A.D...jkk..P,...T....[...u.C.>P5.pd..W..'.7..25...2UA...{..-.r..46.....T..&..k.s......}..\U&C.}Z[.Q..Y.y....o .Y..d ..@..l.J!...0.9c!...K7..J.......C..n.0.O.........UrF,UJHD.".Q./.b-..7C.. ...C..P%.\........jk..Q..u.$....74..+fn.B&.z...[...$.2U.J.7..z..'\9...9{.eu..Z..e}.d...\|...y.V.,e...P....e.:.Iv.?...(.je..d........@..?p.R.b..//..W.f..Vf%.....T.K..b..I...q9.}..!/..tZ...5j.....g`.^Tp....p.g._4......(.t..?3sjV....F<.=S_.......kR-...T.......\.o..}/\.O..7....I........G......S'.$$}\@..zGp.J...Do......@UU.,.W~.,......7.H.6...$../....U.Q........F....r..4.]...%.8..<.-R....'...U.:?.4.'.fY.1vl..!h.&.i.p?...p.{...<.s..p./}..2 ...=..#......{.G...@.p....@.4k.`...u...........m_.....G..]....Y0....(.#F.."" .*Q.."..(.....Q.3.JI.J..r^....Glk,.....n.(..D..e...jw..KS0.+.H....

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 44316, version 1.0
Category:	downloaded
Size (bytes):	44316
Entropy (8bit):	7.994860790146446
Encrypted:	true
SSDEEP:	768:8iY5YSLtv5kwY3p+6OWzOz3UaFfQOJSLUQOk484megEUNdg5kNaK3vUr/H9/zvBE:8iYNqz3p+hWzObpFBJW5OjWegEvOPU7I
MD5:	F4B0DF592BED06B7E1AC275945D8EE61
SHA1:	DBD15D6534D7ADEF8E4AABA1A89E7A2CE22B16FD
SHA-256:	C8FB82DF9421FA2DE18E11B89200EECCB188DAB713331F06C6C8782AD5CE5437
SHA-512:	BE5EA92F8F78869D5EF69D96B2688FD6637E3BAD65C15AA83E118C2C66357B9417993BECCD752B12A68A6C0E6ADB7D1E69F6FB1E8221CC608EC33726DED7C69C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXK3I6Li01BKofIMPyPbj8d7IEAGXNiSnc3jw.woff2
Preview:	wOF2...............0..............................$...x..4.`?STAT@..........O..6..6.$..^. ..<.....[......S.....t..`..k...W#..EJoVXt8~A..W..y...~J.......%..^.p.</."..u..k.z..4.P.8....q.L8 3.y9.X..........%..+.Q...#...].......}.p.xE6.......aYp......4...V........{wy...i.i^.IG.G.dw...7...5.,W...#ch....h..O..l..z.......W...Ge.9.R}.._....N......L...lv[{7?.$K.o......W...fn..,.+..^UIGd...'/.<.es..;......F....N@rIO..(......C..Mx....1.uo.@z.rw....b$....;.&P..'...a...t..?f.bq....^....#...?..=....<L..xc......!........{...3..g..+..X.......Dm......I...B.J2+v.3.D.E......]."..(...s.a...V..RCH.d7.@j!.R.$.......X:....l......;[.r..........3...............U...... '..;P.o.@>.e.... 7EP....#..R!n.:p.g.......l'..~.YR,.r.TG.....r.I.W.!.c/ .w..W..U..a/.....e_[........{..J..dM.F.._..[6[].lF.....d...P......~...3?.1...g...d.kK.RJX..../T.....C..y.c...P.p"..!....y.W{;\/].....e.P.....,....0...._.'....g.s\<FBH .w.nF..<....XAq.3..{.K&..%.Z.;......!....Z-.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1256, version 1.0
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	7.767364329523114
Encrypted:	false
SSDEEP:	24:QIz1dMQFq2XNS2sAy8z6ija18fYBKk2oVeypqRcvV5W548yqyujMtrP:J7o2O66W+8oVrp+cvrVneQNP
MD5:	6DD9A903A2068612E4F0D7572E284077
SHA1:	A87CE7B07CC3C4F09AF54E2310B97F4678935F7F
SHA-256:	35015DC730E404653F8B00639C287105BC4D09A58C9235659B99150AA1B220BA
SHA-512:	19001F23C7697FC0838D828A34D56F85658E188E2AF704AD117BE0A60063DEF37A8B960548E4BED40612F855CA9C26947382111634B841A9628B8AAD9DA48BF9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lexend/v23/wlptgwvFAVdoq2_F94zlCfv0bz1WCzsWzLFneg.woff2
Preview:	wOF2...............(................................F.(.`?STAT..d....t.`....6.$.. ....[...c.H...xC$BE.4"S.....4.........t.b.L.Z.......Y.l..h../........`.!..8..I._2a.n..............)..o...om..j..t.....H^c...'<.u>..(...; .)o2>...a.(..@.BS..M..].....bs.[.7#. .....TYb.MI./sL.6u..2.`;X.0..-hS...wV..E($...gR..{q...9.F:.F:....D...@?.....?Q...."h._..."...\.....0.v...p..C..... )....@...P`8L`8...`.0......@..RB._w....d'D..........T..q.F....Q..v...u.r(.m.....%..x3B...!.r..[....{!..........S.$...m...&8.hHp0=...y......lyr.....({Wo?...bE...n~.X.'....&.%iAtQd..M...l....Z.....Nj.}.7....^..>.L......B........h....f...Cg.s.....oRP.G.....&.7..K..........9I...L.)S..Ub\|05~..).5..Z......H..ad:..{{..g8..0D.Q....G.LP.....P..........B......-ut..V!...T....m..#..[.)oEe...]U...M.\|.5LT..b.........d.D........J..-i.U,n'.o.!nm@...........F}6^....u..e..W.a...~.v(..c.x..._d....r^.).:........@.0....`j..XG...5.`4..W....K.c..5...<.7...%.<){....'(....N.A5.......bP.[m.`T.xp....+.....X.h

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 72628, version 1.0
Category:	downloaded
Size (bytes):	72628
Entropy (8bit):	7.993648298573699
Encrypted:	true
SSDEEP:	1536:NH8XGACZrcOOWTRl2bvXPHCWTIBu3TTISSpufTHck8cFa:NHf5l2TX6tJbU8cs
MD5:	0F19855AD401FDEA3E11BFFE0D4E265B
SHA1:	44227668D70FC0289CDF988867A619E8E2960CE5
SHA-256:	9A0BEE97B056F9A0972D23BA254990353FD2FA23E11F0B4BD34B25E1AB4A0A4D
SHA-512:	339FF2A58B0DE425C410A21011901823B2D833356D5BFE586D251E33F5D594C68D62F016C779CA5509B46E648EF4809FAAA603029B656A0730ED5D46E7A48BFF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotoserif/v15/R71RjywflP6FLr3gZx7K8UyuXDs9zVwDmXCb8lxYgmuii32UGoVldX6UgfjL4-3sMM_kB_qXSEXTJQCFLH5-_bcEls0qp6I.woff2
Preview:	wOF2..............P\...P..........................P........`?STAT....P.....T.....6..6.$..h. ..R..?..[.....w.....2..N9tq.Y.&...!vk...j...f..cl.t+;...pY.......q......I.....................G\|n......?s.... ..$@..2AQPD.Z...D...S.0...M..R......+!.Wky.P4.Z.4[..-....t....g.-V=....1@..\d..>.Z. f#.s!.#.....@...!.O..>...d.GB...qF#.9Gr....r.S_..X.#.:.#Sm.\(.!.7H...[.1.Q.+..x.2..1..}w@.nb-.....fY'.).w$:..C.D..[+..h4..u.fP.r..z.G....B.U(.r ..... v.......8.1......P.6/...Or.$b..'...wb\|..3r......$.....HI.p....6.hp)$.....g..."2s.gFh.&..$...+.....%z..R..R.V....9....D.tN.w.ts3i.I..&B...l\|.9..O..o.-..O.s......6.p..A)..2z[A;.b/....fi..%V..Q.kn..A...F..6...Y..=sy..q..jN..U....ae."m..\|d.i.K.T......p.D.............y.)...qu.^.\..I....5.;....y$.R.P.s.oV..+Vk..'.3...C...;...io....Y......}\|.6...lYhaf....]..d7...b..4.u....5.3F*.@..-I..$.....N.f....T.....C..1...?`.%dM...fHw.9.$0-..}.pF.ia;7.N...(.!.A........V..wF7.J`<9.J\...S ..i...3.cn52.2?........D?.Il......mE%.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 60648, version 1.0
Category:	downloaded
Size (bytes):	60648
Entropy (8bit):	7.996486811511533
Encrypted:	true
SSDEEP:	1536:ImmBIE3fQFv+PsXFn6FJ2tLtPiT9iQWttSRTYy:sp3f0MW6YLRi5iQhR5
MD5:	0E46400F3E919D0CB74068D448D9DAA9
SHA1:	BE7343C9CFB3CE5388F38F2A8D302ED8AE8C7D6D
SHA-256:	9FC62F0847BBEB2B050932BC04E8D60087955E2BBE3659FBE89408F4C62F2F7D
SHA-512:	6A2850BADBC3AC36022E717DA1811808B16997CA6EAF58D106F8F3F9D15ED1F3C1094E8DEF9F4717DA31B8D7EE8D46812FB1C473F916059FB47C83BE47CF344F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/spectral/v13/rnCs-xNNww_2s0amA9uCt13D.woff2
Preview:	wOF2...............`.............................H......".`..\|..F..v.....<..0.....6.$.... ..^..)..J[$x......uo9......S.$.N....q'.1.#fF..mS.M.g..j........_..@..........,.6g.....$......Z.j.t.A...E.^.N...E.1.O.!`>..q..\FD...k.x......(.....X.{.XZ.N.<. ".....:.o...u.J.@.mp.........s.., F.r....^......F....#.b.......GA..N.jKQo.S\|f....Z....v.B...=.. B.}@..;.....DzEBF..QP4J'&.4z...+.tn....T.Z.K.....n..VT2nF..e3.]..p..6.q+?.h.3.~..+.I/)).&.....{.......h\|.q...F...W.-)........v.$ZA.N. ..y?b....kt....Q.J..f.....RJI.Z8..{.TI.d...=...R....V.9^>v.z..[q...^4...\.2T;..Q..TN....b.s.._..mF..5.2!...d.,\...:."/.q.t.K)...#..5.....M.......kI......%4.3... ..i4#....:...E...8.U^.....)...]"G.r..yB...`Sf..........[~..s`.:......I...x.$@.RC..8m...Ig.............:.0..:..S..F.q..f4048..........6...a....5..2..\|.....i.+........J.....coi...].....W...e....=..62O.F...1.....X=..}.=.b!...I.i..Dr..."4.....ZR.$m...}.m#..U..PEt...:...\|...6....}.`..#..#F..#.......M...

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 36840, version 1.0
Category:	downloaded
Size (bytes):	36840
Entropy (8bit):	7.993562127658027
Encrypted:	true
SSDEEP:	768:Vne728reVhZRDsdY38FWernlqO6oqd1/yc8Kmfd:VnmhrWZ6zhnjjqjyc6F
MD5:	3603078A7B178210AC17285E145B4A8C
SHA1:	D57FD925F10C47D039FCDA3CC8A2A12D23E134C5
SHA-256:	DCBAF64460B4DB78BA16EE6230D2C90215DDA58CE8C285348D624FE32DBC470E
SHA-512:	495F1BD5DE5FDBCB73865CBB3B5E966906E527E6E9204D62492F433BEB4E8E31F2934A64FADDF805E44A8488B36E8C98C12C70339177F6F10541331CA7F407D7
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/comfortaa/v45/1Pt_g8LJRfWJmhDAuUsSQamb1W0lwk4S4Y_LPrE.woff2
Preview:	wOF2..............................................p...x..(.`?STAT..6.....0..r..R..6.$.. . ..P..#..[]}...M......".l..U....Nn..@.T..$E.c.8...g.....oJ.2..........%U.B...yr.... )K.\saQvb.Q.8.B{r.y.I....!.c.SJ%.rN.$.kI.WB.../<.....i5x}..\|a.km.YvB..jFHY%...I..S.k^L3..J.V[..:...ng.j.y......L....WJ.S..;Cg....N..oQ..O..E......c....\|..V.........S...O{..7....~.......}x.[.1F.......I..}DR5.7q.\|..."M.F..N.....P..%....B.q...P..I.^..fs....B...TO2...[]..csj$.<......$....}J.<vO...Z[..w.5.q..G.! .-%i."...&b....`.U"H....&.e.">a.r......=.....).Fjy...p...O.u.;@s.L....U.m}.lb...-e..."V~.........G......m......qm.n....).A.3.Y..x...@x...s.j3H...p.YS.w.p'..b...w.6..o[..M......!.....%<..x..C..&.k.XK.-.Z..z..k\|...........nr......x.X..q.........^....7X......K.I'..y{i...H.7$\|.ka.._d.l.q..".l.?.*W...`H-Ja..."{..zF...H....!.SqX>2..!....)...-.....S.?":Qz.....]....;...\..-...t..h'[...s.p!x..3]........'^.]f......L4../%X..>?1.....A...,@.+.i..?%M-..C.{.J:........./..E...l..

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34184, version 1.0
Category:	downloaded
Size (bytes):	34184
Entropy (8bit):	7.99444009565784
Encrypted:	true
SSDEEP:	768:8pJf8lXHzTyT3P9QWCHmzL3WbHPBBWQfIKkydgMbG48B/u:u0lDTyrKWCHeL3OBDwKdmp9u
MD5:	1ACA735014A6BB648F468EE476680D5B
SHA1:	6D28E3AE6E42784769199948211E3AA0806FA62C
SHA-256:	E563F60814C73C0F4261067BD14C15F2C7F72ED2906670ED4076EBE0D6E9244A
SHA-512:	808AA9AF5A3164F31466AF4BAC25C8A8C3F19910579CF176033359500C8E26F0A96CDC68CCF8808B65937DC87C121238C1C1B0BE296D4306D5D197A1E4C38E86
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v60/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2..............X......................................4?HVAR.k.`?STAT..'...J/<.....`..(..Z.0..N.6.$.... .....K..[O;q..w....z.....%.O.t'.R....6.{..@.k......C.B..Z.uU.}..!.".....]jK.`&.\..4...US.......x..C...1g.:.+.?.t<....J...C.p.c..J...........V..H1.6.~..n.]~"R>..s....7....FE1.S/m....}..<....M..IHB.._8.d.3"......8..t.;f._~X.A.&n.1..t..v...n.._............eS.......!V."v6.xm\|M..O.z..,....,...N.1......y^7...^^.$.!.$<V..B....."j..!2..Y"..{w!..Z.[...]H....M-.".8j.<..X.[{..UI....ML.J.?4B.....]..4..()^Bi.4iD/..]....../I.-.J[D...........c...)63.U.rFpW5}.9$..2...t..:.MW.c.N...lK...3^......./..v. !...;..v.w./^S...\U....\|.......Y9...a.z.....i..$J.U...Ks....0Q.........iy.....M..@..........&..c.kh.(<.O.....~..#.-.gfw.t...nbo...]0'G.!.2.8....y.K..;%......_).W..?.'.DTR.H....G.Al..d......g>.6..(.."4l...3$...\_.W}..R...\.o........`..q...@XG.wpN......!....&...\.&.....N..5..n......g..bR......HV...s...e..r.0ty&.SW.j.{I...".m .s..T....l....@th:..aM.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41676, version 1.0
Category:	downloaded
Size (bytes):	41676
Entropy (8bit):	7.994510281376038
Encrypted:	true
SSDEEP:	768:spGlqkWqlt2B+/4qgwfs/W4NoQBUVRwHseU9BNhS:sp+B5Ik45GwWorIEUDa
MD5:	C619C10C85CA3DD6D4B57CC59BA2A32A
SHA1:	92A0D8AC165CF6788BE6259F901FBA1994886D91
SHA-256:	C129C2C42B2F1D5AF9BD5B9858F0EBA8215EE3EBF61FBC99866E107B2C0AF4B5
SHA-512:	BEC65C9991CE74CED298E75A30369CFFE9D40F26B7EA10B7E16469D32AEDBA85889E063B2A571F0FB38B8E560F3CB26E7551A4FC6736F4EC2B6DBCE614E141A0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDFwmRTY.woff2
Preview:	wOF2...............4...f..........................$......4.`?STATD.............6..6.$..^. ........[g......U..r.....+g...n.-..6H..'>K...;....+.v.......%.B.............U...<<.8jF.2.2\|.)P..pcv8/q.h..r."....T....E@r.1;.$C.R.Zr.^..Vos....[...nJv..:..]..$.p7%Sb...QIt.q........I.:..".0=i1.p.,..fh...8...\.?..n.o...O.....7j......YC........H.W8."...c.....O=.....wjXy..`..,.T..[..$...w.....^....\|...s....+.....Z....m..E...~.tl\|6......:X..........20v...6V.x....M..K.6%.oD.m....F..<?.?....=V...#..R...Q.._...#b#V.....)U&.T)!..PJ.....O.^.+y.c....AO..%I...r...g.....-Ff.0...;<?..........c.....1X.0b......3..T0...3...<E.......N.9-1.Y..=...#./.o...."u9.hl#T./D6....F."t..e.%,.s...&.#P..G..n..Y.....X.N..._h.j..~..j..*W.$./.T.>.....e......S)..`...~......Z.c.p.q.P.HP..oO.}...2..R..(S.Ph.a..0.{.k...o".x...t2..tB...r.}g.<...otO.I.....Q...a.).......3p:S.$.......IB........!Ja%..=...36.......SD..+.T^%.k.m.u.W...3.9.L.p.?..'H.MK.`.. .v.]...(...u...(...c...r.\|k.......i..]....

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1510
Entropy (8bit):	4.0355432662902455
Encrypted:	false
SSDEEP:	24:t4qU/S93QRhYj45kRHDu9+u1lUetmCmifvqbbLaHu9HGn1u1lIdUWA/jTq9Km2zQ:A/S9rU5I1YdtmMqPLmum1YUUZ/jTq9J
MD5:	CECA603BD198568DAB00E6DFC3120706
SHA1:	871C637521103DCE8F6DF9AAC0D1B62900D511B8
SHA-256:	F4AF84EFE90891185D9B29A841181CA9D26D7560864EA47B6CD709D3B964AEE3
SHA-512:	D3F4A52AEADEA52FDAC82C8B9A7427897359B43C3FBCF3E79AACBF30571B3482C991C5346069CC5DDD474C3814CF6507065C4914369C1236FDE641A934A08706
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_dark_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24zm15.76-2c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52zm28.58-8.03h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3.52 1.74 0 3.1 1.5 3.1 3.54.01 2.03-1.36 3.5-3.1 3.5zM38 6.19c-3.21 0

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 40412, version 1.0
Category:	downloaded
Size (bytes):	40412
Entropy (8bit):	7.994886632164997
Encrypted:	true
SSDEEP:	768:0U0SxIWUlVNVyPSP7MsHS52XxVWJCwQuF64SFjZfqe2rGPNy1ctML:dSV2EUeeJCwHX0BqeeKEB
MD5:	7332D3B0FA7568125CE6FE9EC4D55151
SHA1:	1822E1EF270F935E5FF8EF83BBE8D0C27CA3CC55
SHA-256:	17406C4E4926C81DCD8F3832B79428CCF82F5A3AF17C03AFD0E37F13413851B7
SHA-512:	EA96241276323BF4835A2247FC299149E8154EB4121BD7F0846D3A514774ABCCA51F7567C348D4E9BF9FEC94F7CBF6E2374C89DAAEB397E1B8B7D3D417FCBC4C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq6R9aXo.woff2
Preview:	wOF2...................y..............................8..Z.`?STATD..d........6..b..6.$..@. ..<..:..[.......55...m..)...WW.7...[:....n......?.......2.1M..%.......[..nBdf.E,2.^.E..L..j.k.k.m..,..7a.."..Z.O.\|QFe..1Y.>...C.6x.RZ?...=]..........9U..2.......i;...Off.h..$$.~}s.....\b.T. .IH..."..]Xn......GT+!....(....w1...hn.....j.b.Q.Su...6...VK7..vI.?.yFO..sP..E..Fx....(; ..i.).P..).....S..5...z.Z..w....z......N...3"~Lf}..z7.....T.k...]S.)~VX..v.b.......VBN..7Z...7I..1.u@<6..m.8.....eV...48..%tV.<?.?...V..l#7....X3.6.XdZ.....]...j..QcH....g..6.Y.}....B7.6K.w...C...8..%'1..4^M...Q..H.....6.t..'.M..?S...u.#z...0`..cltm...J%c(.R-...!..)"......3.}Q..K..)Y-......4...U.d..(\...M7..i.AB....y}..~...}.7$.41/%^D44.d.H?..x..@(..\.`.w:B.o...t.{\|kZ....\|..`Y$k...~..c.}...7.(w....p..1.l<...o.........5Y........8...DR .`.........k.3/.;.....+...F.....d.3....')9.......X.j;u...C..\|...]..)!...'.7.&..a4..O....;g..A.b...c6.-"..2..X..Wgo..{5h.]A".SLw.)..:$l..4.-c.q.v8.k...dk

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41284, version 1.0
Category:	downloaded
Size (bytes):	41284
Entropy (8bit):	7.995064975939542
Encrypted:	true
SSDEEP:	768:cfG0KEtyj2eCaD4YcktFD3n2Eaxvgg6UOJ47dDNITDCJeFqtlBcCi1FWOLtgYmu5:cfG0KEAj2gD4YBFD32BbPdimectlBcPp
MD5:	87595E01EADD10489540C2BC9532C831
SHA1:	E3EA9372FC50308AFB080F0AA0C1B544873E7896
SHA-256:	BED2897761BB0A09F1993AB40B94D35B1E2B3C57039379B888503C6EAC7DCE70
SHA-512:	62B45A99DDDDAF13A857380714567ABA0386E2C0A8A89FB378C1123645F693FE4062F075D143B153021FF556F9235F76275F3D73DC79401FCCC29E405AB09F9F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/playfairdisplay/v37/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_qiTbtM.woff2
Preview:	wOF2.......D......................................d...z..f.`?STATD..t...........\..6.$..4. ..\.....[.y.........v.}.$.oU...i+s.:o...,.}6"v;\|t.......?9...i..PQtn..]..S....D.V..0s...N.y.4....."S....3.(...c..j%...-...Q........ .{.943.h.....N...}..P^Gt....._U.....\3P..k...q..C~...%..eCYv..>.....u.....Q..kJ..4Y.~%31R..2...H:.{...Ue.j.!j....-z..$.a...$N.$>4I...l..a...._?../.L.b....]..n4..Fe.j...&9U..j..NX...D.U.E.....).^.KR..t..........L.o..P..U`.z...N.G..~......8<$.....(Q@..$..$$O@J..+.".%RF......h..,..}....%.k.m....>.NF.....u.y...O.+...`.0;8..i..).;.z...\|s....B..;...!R.kY.3..\|.g..i.\|.f7i:.J)t1dI....A.D.........%..T.U..h.D....a.'AHO.<.wo.y...B.'....1.e.....X.....G..q.M;K.p.x"M.Q.g.G..\|X.w......."./n;.i.......b>..........M.J.I!D..A...s..J!...<...hx7.n...t.-.r..m.$b....m.B....B....~.:UI!...{.Bd..!,.=...r...@.d`..~...sw..d..E..=...C.U.$%.M!...Mz...O...`.W...2....N......R......9...F..r..'..?...{..h..a.../.@@.OZ...:@......"y?>c....O..uw..h.H

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1416, version 1.0
Category:	downloaded
Size (bytes):	1416
Entropy (8bit):	7.811377924682188
Encrypted:	false
SSDEEP:	24:N2bmsAaPNl1Yn3NXvem3NhvRcpd8CE/LZnnrHrEV9bw+k1kjXriNClDuK/PVa1Fp:OmsAaPNl29Xb37vRcpdO5Ezbw+ukjXrg
MD5:	E2D07BCC7B3C68F09F3517CD26B496A9
SHA1:	1BC266CB846B248865B43E53CCD7C8117A70B7BA
SHA-256:	CC93B0C6CCF01063B9788530CA2389636059624B18599DE8EDEF8D4054255474
SHA-512:	35DA3761609813625AD4A9FDF9253617CE61EE350F08B2915ED38C66A50DDC2AD35B5D0D0E4B8993103E4E40A116621FE2AF2D0A9C4D71D18F9B1098B82215D0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_QuW4.woff2
Preview:	wOF2...................1.........................4.`?STATH.d....x.=....6.$... ....6.....Q.0N.....1.C\...d..T...'K.......s..fC..h.....F..fiM.m%j . .B.(.40fBM..9...S/M})...K..6.j...?.ok....n?Dv}..?_W..V....Ewo....Y..x............<._7"Pa.Hd....r.E..n6:.::/}H.dP<...w\..... z.....H)'...,....Y.....e...b)...k...2..<l..8...~gY.U.M"R!.zM2.\zM\.\|...c......@..0....h...s.#...]r`.!}....4..d.&......gf..n.d.....v>\|s.P__G..GKBa1w!...#!.A.....mNq...Bw.P"p...J..5.....D..Q'...B..L....CK.. [T$,.`.G...IP,Y....A.J.l$6..A.}...`..8..;..]u....&.[....m.@..]z..C......'Z+.l.4..Xc.. ...%.d....x.s_e..P..J,...81#...>........+.8.K!...E-C...%.,......'.....2{Uy.4.....xH.....B.......Mfn......`.q.X7u0r0...q....q..d...O.b$'...r.:PW.C....P..S....XS...2.....K..P...u.S.bd.@k..'.o.:.z.=...?/.y..m~>#\..._.Fi..w[[.<.t.i.cG...8..`.d..R.9.L....D......4.`.@@$Xjp}.1l.G....]$.;..L...9.E..o..\..e..#...f..p.=.~.qp..)J......".L....:..].....oS.u&....F.6.....5....H5.eai..~..x.[F...E..y.7l.m...s...

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (562)
Category:	downloaded
Size (bytes):	539605
Entropy (8bit):	5.5537600443409145
Encrypted:	false
SSDEEP:	6144:pwMsPSSM4VW39NiTJBhvC/NmF2t+CEaJxzSGxetJ3:pL4gNBJLZxo3
MD5:	8F931D99C3180329C64417CFD7F19FB2
SHA1:	CCCEA9AD3624065E7BF020B935DDFCA52C229C60
SHA-256:	2CBA087163D109C9CB9945531F196A91E3665E8634E7AE81287215BAD7A279F8
SHA-512:	6A65CF625A14DA2460CE430D9A8682B9F3B657F6C01855371EB73FE376EB087D55DEFC7118C2186B8B718F045BB61CF75623C02AE8921C22AB110C973E04A2F3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/freebird/_/js/k=freebird.v.en.5fAGSsMcBN8.O/am=MBg/d=1/rs=AMjVe6hbIiASzM4-32J5zX7utnFvaDiUcg/m=viewer_base
Preview:	"use strict";this.default_v=this.default_v\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x1830, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var ha,ka,baa,caa,daa,eaa,ra,faa,jaa,maa,oaa,taa,$a,ab,cb,vaa,waa,lb,mb,zaa,nb,ob,Aaa,Baa,tb,Faa,Gaa,wb,Jaa,Kaa,Laa,Haa,Ab,Oaa,Paa,Saa,Taa,Uaa,Vaa,Raa,Waa,Gb,Xaa,Qaa,Fb,Yaa,Zaa,$aa,bba,cba,eba,fba,hba,jba,lba,kba,nba,oba,pba,qba,rba,sba,Ub,tba,xba,yba,Aba,Bba,Cba,Dba,Eba,Fba,zba,Gba,Jba,Lba,Kba,Oba,Zb,Qba,Pba,Sba,Tba,Yba,Zba,dca,$ba,aca,ic,gca,ica,jca,gc,jc,kca,lca,mca,qca,tca,nca,sca,rca,pca,oca,u

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1516, version 1.0
Category:	downloaded
Size (bytes):	1516
Entropy (8bit):	7.795649487038873
Encrypted:	false
SSDEEP:	24:6lhBQUW4PjMJI4ApTYg5f4iq+rFuy+IIizzxClBvtQ1OPSybhzsAmnHYvOWuz:MBQ74P4GYUf3q6uI7ZcDQ18CAmHYxuz
MD5:	314C94C93E0D293F63A2C41F8E82C852
SHA1:	A648B285460C78DEADB882996F09FD75D8ECAB74
SHA-256:	CDAAE795074CED24AD382F9F21C4F2E3443D3DC27BF6F75AB5CB43D54F23F009
SHA-512:	25F6E258E641129B61CD4CB37111CFE8C55E44627B7F79E1F26FCC023600A418AAE40303BEDD1F2CEE18943D844744AEA0EFAE9496303DCB737462D59604705E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw_aXo.woff2
Preview:	wOF2...............`.............................,......`?STATH.l....d..."..6.$.:. ..\|.w...`.QTr:.\|u`...C.(J........c..4.".x.....C>..Okl...T.E...D(].4K&..n^....s......+.\.fP$.'.D\|....Y<...w.D.I.t.\.<...,..?A..\.K ........A..N].'..u1....,".^..J...5......~.f.....-.3..4......S......H....H..H...0. g.6..9+&.C... .%..!....$.$....2...$..u...Lx....$RK.!..%.......26.A=.W.........A.......J"_..8(...G...n9....EcPE3.....DS.p..A.....PZ%...Jv..D.Id ..j.W./..fO.....Eq."......Z......r..rQ...2.. ..G.....dT^.#.......c4D\|S..G.!s.J@.P.....P..c.....1.wI.Hed...g..H.)..R.........7.NU.8...R.8..}*B[c.;..U...]_..........O.WQ.....LjT6..CJ.......s..w...ZR2.Uc...0.=Z...td..Bn,.U=.a.QQ....kW.p....~,...M.q...^.......Dbb.kqV....')..Q<.(.V.3.%.......~...o.&..@..`.2....>U...&!.bWOeEge.&Gf....g;.v..u..dUOV..GP.....^.?.#uR...N;F.4=._......f./jw.h...z...S.:..XCZ..W\r.{M...)...-..J.x;.l..Qu).*?.......;.hf.J.hp`..: ..u.R..on_.V..~'.a.j..F._.r.....FU...n.$E[[...........x..\|..n...P...

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64968, version 1.0
Category:	downloaded
Size (bytes):	64968
Entropy (8bit):	7.991086223648761
Encrypted:	true
SSDEEP:	1536:WHzRKTLYRYDl8vt4WqygfVfyjuCCjMto7zgxOb/LlItk41fR8V+pF:WGLRKwygfVfy5CAKIxOb/JItRL84pF
MD5:	38B24F2C1F13FF0FE4D75754439192B1
SHA1:	B85F7DC43D9DA69F8C5034F682D047EB3C5B6B9A
SHA-256:	61514A54C59FA9A216CBD4BB4FC24B58E3956088D4E0FBC85BB63160E874EFCC
SHA-512:	431383CB96CF7DA1E372F46DDAB4AD0DF26F86370EF52772BBA352D46CAD51B06D0662217AB945D217C1B040AF228BB114DDBEE5D3C708D589AFE6DEC97167E4
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotoserif/v15/R71RjywflP6FLr3gZx7K8UyuXDs9zVwDmXCb8lxYgmuii32UGoVldX6UgfjL4-3sMM_kB_qXSEXTJQCFLH5-_bcEliotp6I.woff2
Preview:	wOF2..............N....a..........................P...,....`?STAT....P.....h..U..6..6.$..h. ..j..?..[....^..v..\|.Ia@.Z.T.&1..s......m....2.bZ....i...H{.O...m./..D..\|.................,?.rs.._..{...&7....C...@.X.V.(>x..H.B..IHk&>..(g.PV)$.9.^j.HM)...KPm..I...]...:...^....Uq]3.q.b...JM$+..f...0..y-.E.=j..C ..bP..(^..s..x2...F..9.J..=.K..CE<'."..#n.......wD/..H'.~...r..\.bBRZ.....]..g.M..-.u#'j].G.&?Us/..W......r...b.\|.:U.m+\....-.W;...7.".Df.R]...)..;.$l.<!=..i.\|.Wt.Y...Z..Fe..=.^....z.&...;.R...;,...G..ic..#...Rg.%..M.?.N.I.<U.U..$.c..hh.!.KY....jp/.zP..}.....V5.....<.....4....A..Q._...9...i.......e.J\:.....hh../.zR...[g........^. uu'D[!..@c5.......(\.`.ct....4.......!......~S./...{=S.M..x.[..e...e..J/9......R?..LUf...$..L.....G......7.+.?2..NZ.'y.....%1....j<........t..w.S..OxfN#sv.b/..cw._.-x@.I.....G...a....^.B.&../..~?S.G...L/..<....h...yWy...k.,...e..w.3}V..dE]Z.....?.....(..q~n..Fb..`....jC5t....2...,....a...? ..S@.7...%b.%Z...*O\|...K.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 2484, version 1.0
Category:	downloaded
Size (bytes):	2484
Entropy (8bit):	7.903859306518773
Encrypted:	false
SSDEEP:	48:/dSIWk6muY0rJJarbEgdzzTTm9fLEZAlMfJLn5HWSd1DX3Z:/0X9Y0rgbt1TK5LEOWfJ52cDX3Z
MD5:	9160B78EE0B90045C930EC35D1C3A91E
SHA1:	3DA7830A860E809B29AF6A65017D56A1FA121892
SHA-256:	BF2174B338F1EEBF563FDD9BD3909F5269B63AE05A9EA26A738870CC6B504B08
SHA-512:	A9B5CF35FC94666CA48BC4002AA72C8DD9DD79D5ED62E69B8ED823F8456A2978EB4577969187DA8733D3B927C9F052439830ECE8E2793104B099DA43B262471B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotoserif/v15/R71RjywflP6FLr3gZx7K8UyuXDs9zVwDmXCb8lxYgmuii32UGoVldX6UgfjL4-3sMM_kB_qXSEXTJQCFLH5-_bcEliotl6Z8AA.woff2
Preview:	wOF2...................X...............................X.`?STAT...t....l...(..6.$.L. ....k..............6.5z.3r..C.IEM.\^x(..Yp..=3......>..n6. W"V..]-)`..=].$.,+<.......j....Y. .K......xx:../.8......7n....).KZm..7<../.!i..L..C.B......s{........X....(..k..X..`."^..R...gsw......xR......(f...Z)....p6...8.....W}@.....V.....a......w....,....i.#....b...H8or......e\|..b).?.....S.L....g.._.#...Y..h..e..zVD.[E.y...L.m.a.2...D......3cU'.FV?..R...4.....f..2"\........E...HU;...i..[...[^wZn.....5a.x}.i8f ..Y}...JuEi!.Pv...s'..V..&.6..M..!....L.l:F..........X...{[>l6.s....[.O.....&(..{....z.....).!>rfF....2$..s.d...XS.4.L......u.....J..0..W`.a..]..$..x.=...4.1......._>M....[m.).b...8.p.!...`.....q.&B\..........9.t.....E.G..-M..T..`.7M5@............1.C...N..I...H2}....a.$....{z..L.f.$y...g`.0-6Hm....u.z.q..H."....I.cc..{..J<8A....l.._A.5.i0.`..t.D.U....4.\|\|;N.G.Vo^dk....FMFt...........'~.U\|.;C. i...&pr..7.t2.c(.p.N\8.h..g..0 $y...5....u]..{../.S..!.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46840, version 1.0
Category:	downloaded
Size (bytes):	46840
Entropy (8bit):	7.994725589879299
Encrypted:	true
SSDEEP:	768:pBa1htdmJ4nDdfoc4qb4WcelHHWo7hW9Igq0AapIqFjiIparJ1KQCiVOQXV47G6x:pc/bhDr4MLlWo7hzrn0Iq8IpMzfvV464
MD5:	FA1ADF616690586A617E2F265AB761B0
SHA1:	802AF2A60A925A68A50C3BD3C157D284E1B51362
SHA-256:	28AFB7554B3B29A5587799EACC92FD889378089FD568E5C8430B41D83D012B3E
SHA-512:	5C2AD9BC7116418A763A8D2AD6D5B458AB38480D2B31441EC8FD97E1FD708535E447A8991211A4BAC846AE5F0AD9FAC206FFEC1D07C3B1523128E6E0477FBAD3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuyJD.woff2
Preview:	wOF2...............<..................................h..8.`?STATH...........F..r..6.$..`. ..h..r..[h....nE{...9.dsXJ1L...n.SV.......^mYF..td..a.....................S.h.unv.jf.Oa.> v!1..#"...G.\r..&.a2/.0./V....T6?.%..G.tyc[...+..H ..9.v..J.}A.%%...M.D...$.jX..............u."...y......T.&.A...R........,X.z...;C01..F..Re#E+H.].b4T=g...S.z.[.{.&.sv....-.....{.{g:...K^.-.~...7...L..W..v.....p4.\.F9......3....Q..'.LO-..E.......W..?...4!.v.G."'T..zV..dsU.$..T<...tM.T...y3}^E..I}......"..bi.q..\|!...I..Y.>..,.9......lc.....=R..C..PTPD,DT...0.0..#...........X ......y.m..;........ZD..+...?...Z.4....5bm_..m..5.[......>.... 6......1..`0.....F7..P..{`.s".........}....n~.[o.g.........Z..Z.".....2X...Y....~k...(..K.....!4.H..{>.o.:."!....A_M0.2..9._[..-..p..........h...YB.7k...k.....^..?..?..P..r._.M...d&..O.:..g....oU....9H7..(.}..}U...z]...-. .Y..tw...k.a......9..J....V.;..g...'.p...........6.8.YGdc......H.D.i....K...e....[$.]'..v...*).C..

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 3576, version 1.0
Category:	downloaded
Size (bytes):	3576
Entropy (8bit):	7.929396607787142
Encrypted:	false
SSDEEP:	96:wUD7TIaLIl+wMkgmQl0Hxft1Y/ZJ7T5MeA:wUXT7LXFrmy0NtGBJ7T5Mn
MD5:	3451C91ABE3E05F03BBA52CE59A258E7
SHA1:	19FAFD4F56FECDC013D8AF0DEE6C51E9A338FA5B
SHA-256:	D4BA92453033372B440E5E762EEDEC60DEC8B3C32008F599B1C7F46376D64216
SHA-512:	828B536533E183C5E6D8A904675AF7A6C24A38D30C5AE454640F453C0EFC8FF4BF55CFC98F7C30559D156DC8F9FA3AAE63D02C0F7B9C0ACE46DABE5E2092C105
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/spectral/v13/rnCr-xNNww_2s0amA9M_kng.woff2
Preview:	wOF2...................................................`.\|..F..v....H......6.$.0. ..v.....J......l. ....Md........<...3...W...Z..2.R..4........9x.......'f...Bl.m...C..Q.L............iK..LX.W~.F. .t...RP{T..ju....W....Q;na{h.....KC,."Y.[.....?.k.IN;$.t<...3&}i......!......B;fa.l...X.#Y1.w..l...Q+'...rD....\.......00.>S.!.]..h..........H.b.V.C...........@.A.....Hg8ne.a.)R..;L..k.......f..x.X....`L. Q.qp(.....X.K/......z.........d..$...!.0&.....Q.F.cx......j.vF..t=..[....X;g.8.t..Z.....&L.T.U.RU......\|1e.)h.'.>......!.....W.+...X.........N...c..5.g.I..m.H.u...V.E......J....4}..r.....i.....9..W....N...u.~..0."./`.....#P.L.zZJN.......U3..k....a.B4y..OX:.d..1..?.2S....e8X.....5y~.Cs.b....+mZ.R,..2XEd..i!mx#L..'#.:O..k:G..`.....t.........L...?.^8)..x!ie..6B...........B. u+ ..7.F(8...y.I/RVO...,.p.......x........i.;1h.Q0...C.2..!.......7.......\B)( .C..H...B.JI%....?..{$..ZB..h[.,S....tj....I2.(s/'".%*.4cz...1.f^.$L.,.1g..J..(..........Y...;

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 55204, version 1.0
Category:	downloaded
Size (bytes):	55204
Entropy (8bit):	7.996026949578432
Encrypted:	true
SSDEEP:	1536:++kGM0yjKGWAy7g9n3ga9H0b6NvpkP7YGF1N9tGgVX:DkGM09fAd9nwE0bYpkMw1vtrX
MD5:	303F0DEE25055EA1A1C53F8C44B83EDF
SHA1:	552AB5948D02D19FF851777D58DBE0DCF836681C
SHA-256:	DB8FAFFB5E867554C1AB9B0EDD0E11E8B5A3D4B9842D860A11646371C2B84D79
SHA-512:	8480CA89F845168FC64FAC0F1FB6C6E62A2C29DC59BD0AA821D06C1B426309916DEF57F90933712750DE70FD32CD3A3A4C2B2CDA15EADCC3A0B4C12B68774339
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/spectral/v13/rnCr-xNNww_2s0amA-M7.woff2
Preview:	wOF2..............X...>..........................N......".`..\|..F..v.....(.._.....6.$.... ..v..)..J[.V......x.o..a."..6.h..L..o.a......fj...'>.......@..!.\|...........&.X...d...Q..Sk..^.wP5.).T..^i!.l..Vx..z.2..~.]..%......sM.......7,.I}.K.M.V\|.l.F.g......o.N.j.G.\..,u~8&.+]).N....f..1..[.M...X+..Tw.u.+<.l..X...$.4...M@.Us.W....N..bWJ+Ta..C.r,..C-...F...<.....U..YY...g[....i.Q.VJMyE...#..N..L.K.....H..q.GQ....a....!..p...tbI.UK..... ..S.....\|..$.(.L-..........w.:..L(......4).9.x........CE..Wt=..w..{..L.k...\|.].ih........JT5.........w..o."a...V.R........`)..(iyvf.2..0.A.W_2#......tx.#5-.C@<6OT..E.+F...._..t....SA..A.]`..6.q...!.Ig2.)...mk............V.x..5..Q.Q..~ZT.l..i.T. ..&*.....h...P..X.0<.6.....wpw....(.......-.....C.Mg.@..ta.B]..s-s.3.......?.\'"...E8.v.zbK.y7UqR.<.o.........d6X1.d.>. ........y.z.ux..TU......!znp.<!....0V-5....H.....l.M.'..7..K.,..7..o.@%'..QC..W.J..,.l.....@.@x..W`O.z.....:)#.,......%8.. .H0BA...i..I.`Rp..4)...p.....c.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50664, version 1.0
Category:	downloaded
Size (bytes):	50664
Entropy (8bit):	7.99441041171138
Encrypted:	true
SSDEEP:	1536:SGOZcxOtnS9UcAJ0dck+XFTh3KttBOI0Y9siZGkbS9:SGjQS9UcAJ0dck+X5JKBOPOm9
MD5:	2EAE80C528D1D7A39C57805DE3E9C799
SHA1:	37ED517E2F44EF14D8F2C4679F9EAD44B050759F
SHA-256:	46B9F52EC517DDFAC84DD566720D00CF3C54AEFF1D543AA9C95FFF830985FA13
SHA-512:	84DB87D648A4823380EDE80089F3E1683B11B70703CF5BD540A11C55859AFC2D063173AD89C9C448AA3A8C855329B242E032F42AB7C8E384E85B82E5C9BF3D98
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v35/0QI8MX1D_JOuMw_hLdO6T2wV9KnW-MoFkq0.woff2
Preview:	wOF2............................................. ...Z..h.`?STATD........X..>..f..6.$..H. ..L.....[....r....@..mp...M/.6.MJ.sl:.....4..m................c...{.T.4..[.m........S.i..s_......0..6{.).``..&.;B....rHI./..b..` .)..b..,.{.....f...QJK\|vh....VuW..?...M.....2.........8..b.9@B..{.Q...'S.\|..&f~..x..8....!%..k...x...%o.)./])[...N.G<.#.!/D..U.ZN'.e..b/.;LL.."..B4K.nr.$.R.~..Ez.A...C.4i..o....4.....o!.z."...'u.z..Hh.....KO.T........T.......w=..=.swe.W..._t^.....O.Q.!o..N.]l.! ....D...k...tkv/...I..+...B(R..&"6.A.<M...ED.""(B.4...@J{l..."6Zx.....U.3./ ........9.......r{w..E..V...m............"-....PZQ.Q6.....e.B.AR}.'...f.....+..'.....5.Dl~lj........-.RJ..T2.7...p...B......Pe....aDCX.]..Z......"4.t..b,.j...<.(.Au/M.j....O.i.P{DE`KN.P....\$]....U..B.R....3....hi07p.....ynx...0.@0...3.B....i....b+...r.4..6.L).pq.c.nM.p..;.t...+.+,!.....L_(.......x...m._{..FB...h"Eo$.J..C...$..y-6.........5K~../#...P..J...O......++.8.5....y..q....L...V.(

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 40184, version 1.0
Category:	downloaded
Size (bytes):	40184
Entropy (8bit):	7.9947257644633645
Encrypted:	true
SSDEEP:	768:CVYVm6qmJZ7u7JaHzl7h98JaYrCS6ZMBG4/0Lwcn7hFoYIsJA7MNfa:CVgmZmJZWJaZwJ1B6O8LwQtFFJAQda
MD5:	1C31342F0BE5BC0E2B1549932CDE2F81
SHA1:	A5AAB8D96192515329B7D888CFC5B7B113FAD53D
SHA-256:	184819CFD66EEE3BBF756A609A0EA8034F09DCF8C68CD817B08358D8E5579CA3
SHA-512:	C73F50D3B12B6EEABE02B6050DBFDC7FA420EB793281926F3E9CDC72A883B4E789A6506373E7C4CA61D9543E86BEF1B320147B1A283FA8B9A77FBE7F1C108760
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM70w7.woff2
Preview:	wOF2.....................................................4.`?STATD..j.....D..^..f..6.$..H. ..@..T..[....rlcs:Te.h[O...._.]~i..s+...t....v...j.......IEdK3...........G.b.hp....`...A.d....%......t..+.xe2s..+....o.....F.].a.rTS..!.n..q#~.........)..}`......uw6.T./...}m.P.\....b...o.].DC....N...".D.w.{%........h....`....i.....U.g4.sw....d%... w72.y.N[.f.1_..Z<4...e_.M"&.!I....JRT""g+.w...>............vz.......\.;A.3...l..A.it.A_....JD.%.v$./..+)YN.pDL.....7...%..i...^]KmR.9..D.;3..v...//...nm.jd..U.........)\q.\......p.G.!.GY..3.6r.......k.\.....w:Dkk....C8<2UP..#.C........h.6....P........@@....o.o..I<......x@%........_>L.u..WI.1]n]....X.E.h. ..R..n.......B.... BT,..R.=~..97.D..xE.TE....X..t.......;3...Kh..*UT"...4mb....E.D.....w.O.{.#..E..x...4. MSd..L_q..Tkg.l.D.,.....u...3vd.....O.............V.o....$..g ....2;.\|?.Xm.......i..........."..\..;T....nn_+...w3.^'x...V.a...v.M..F..(b..@.f...8...0.A..o..D.c..f.ri.@.H....).N..$.Y.....`Y...d.,..o.........

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1747)
Category:	dropped
Size (bytes):	223421
Entropy (8bit):	5.612925401598316
Encrypted:	false
SSDEEP:	3072:QfHmk1sstphhDUVeI+IAO+yBJcyBKN081wNQAVoxIqw70V:ShQ4I+IAQJcyBAEoxIx70V
MD5:	50E71172EFBEFF3005C2FD7EE2228825
SHA1:	8F8F6DC17A62A8DA0F7500E3E976EBD0E41F715B
SHA-256:	DE800FE687E41957CD5A815F2CAF3BA1040EA386DCC402B4EBD4942F0F2AE83E
SHA-512:	8C37D6A85A4A8E73A6AFEB160D24F328E3015011A52B13BF9B5934BE90F09ABDC5F513722AF904CE804446183C919B34951C5F22305532518E52ECCBF5E4AAB8
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_v=this.default_v\|\|{};(function(_){var window=this;.try{._.Er(_.Ox);.}catch(e){_._DumpException(e)}.try{._.u("vGOnYd");.var tPb=function(){this.type=1;this.view=null},OY=function(a){_.Q.call(this,a.Ca)};_.D(OY,_.Q);OY.ya=_.Q.ya;OY.prototype.j=function(){return _.ms()};OY.prototype.start=function(){return new tPb};OY.prototype.cancel=function(){};OY.prototype.render=function(){return _.ns()};_.$t(_.oAa,OY);._.w();.}catch(e){_._DumpException(e)}.try{._.lIa=function(a){if(a==null)return a;if(typeof a==="string"){if(!a)return;a=+a}if(typeof a==="number")return Number.isFinite(a)?a>>>0:void 0};_.mIa=function(a,b,c){if(a!=null)if(typeof a==="string")a=a?new _.Wb(a,_.Jg):_.Kg();else if(a.constructor!==_.Wb)if(_.Xa(a))a=a.length?new _.Wb(c?a:new Uint8Array(a),_.Jg):_.Kg();else{if(!b)throw Error();a=void 0}return a};._.Rz=function(a){for(var b=[],c=0;c<arguments.length;c++){var d=arguments[c];if(Array.isArray(d))for(var e=0;e<d.length;e+=8192)for(var f=_.Rz.apply(null,_

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (844)
Category:	dropped
Size (bytes):	507319
Entropy (8bit):	5.747078425421055
Encrypted:	false
SSDEEP:	6144:sKJI5a5Nzsktq9Muked00pL9FESMtq2QZG6ataGlfOwpx1TMRQrT:9g9JMtPQZG6ataaOwveQrT
MD5:	0CB9F8E4A3FECFD2F8BE20DE4FE16DA2
SHA1:	DB76850823A32E5389D2A3E2A8C9BF05F6399E14
SHA-256:	43347A7C737906BCCC0B88AFACC1128E9C8DCDF1A8624C05B76325265EF797C3
SHA-512:	A127CE67D1BD31CF3E2BE8BEF9CE5AA3FCE4A6E97D59BEC9C5A51F2D2452A3B4F62913135F92FAC2DFEEA13C770DD8B9EA68DE711940CD0FDDE0F8AD3A717E38
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_v=this.default_v\|\|{};(function(_){var window=this;.try{._.u("L1AAkb");.var hOa;_.sD=function(a){return a?_.Bp(_.Ue(a)):_.Bp()};_.tD=function(a,b,c){b=b(c\|\|{},_.yx(a));a.Dr(null,b.Be);return b};hOa=function(a){this.j=a?new _.fx(a):new _.ex([])};_.uD=function(a,b){a.j.size()&&a.j.el().ownerDocument&&a.j.el().ownerDocument.body.contains(a.j.el())&&a.j.focus(b)};hOa.prototype.va=function(){return this.j};var lOa;_.vD=function(a){_.Q.call(this,a.Ca);var b=this;this.j=a.service.Gea;var c=this.j.Nb();a=function(){return _.Xr(c.body,"keydown",b.o,!0,b)};c.body?a():c.addEventListener("DOMContentLoaded",a)};_.D(_.vD,_.Q);_.vD.ya=function(){return{service:{Gea:_.uz}}};_.wD=function(a,b){a=_.qD((b===void 0?null:b)\|\|a.j.Nb());return new hOa(a)};_.vD.prototype.o=function(a){switch(a.keyCode){case 9:case 38:case 40:case 37:case 39:_.oD=!0}};._.xD=function(a,b,c){var d={};var e=d.Tc===void 0?!0:d.Tc;d=d.preventScroll===void 0?!1:d.preventScroll;a.Tk(b,{Tc:e,preventScroll:d});

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 2708, version 1.0
Category:	downloaded
Size (bytes):	2708
Entropy (8bit):	7.889250991886075
Encrypted:	false
SSDEEP:	48:2qhpUIYsa+fy6k4U9/mKlkDC1YaHQ3ZGVSyCfCY6JHSe/Et1iF:Php9Ym66kVHmDIYaHQ37yCfIJyeO1iF
MD5:	B12C8BACB108B452B1DBB90C3D1FF1D0
SHA1:	ECF97F8E8FDA216564CFF508D3B9E126D8666372
SHA-256:	588A0396D786BB25120D5B559B9D546C3F276BC5E17E9D6ED1AD609DC0871CDE
SHA-512:	A0C8212C5291E5160B2125B76CAF92F8DCB9219DE39CAAB082861C6B5FC4EDFEB1B1D13A07B458CF61E4E6EA551F63DA24A24E39285A00226B108721B9E35D11
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDRbtM.woff2
Preview:	wOF2...................4.........................(..:..(.`?STATH.......4..4..6.$.`. ..x........QT....#!s.S..%j1"[.8\Z..(..........T.&.@w..uuU.<.."...x.h..j@\|...p...R'FR.G...w.lMhD."..D.*D.....&.0}.p....f...}..m]`Q .4"/...Su'..B#7.h..V.l.t..v.lB./b....0.D...G.G.$.!.+.)...DRL.7...........`..@6..J...@.D...C.. #(........D.Ic;....5.#{e..U._.F_.K...`.%.g:_......!.V.?..{k_....@...=.$[.+$. 4... .0..4 .J.1.)..=....\.iW....=.".F{....y.D)......~.L2.8H.'G...>.G.........^.f.........$D...PrH...s..9.y...n...X:Ig..N.. ..v"......-..!.....kuy..=t.T..b...r.6...Vr.us...[.=....}.e...NB..LB(..;2.pD.T$.W.#..G.....u.9..(2?..T..B@wq..0.W"'..5..0...$.....\|.-........../...@..!yD..:[.....cb..=...Ub.#.}.TD.....g.M2=........O4."....I.j569'j.....a..l.}...Z_.&k.#.iBH&.......5.9.\|2.....+....=(/.3...........);...(...x..>^rx.K.....dB...y..\&....[.+..Mm......32........A.f#.^f....V..[f.P....Z....I{...\X0<PS../.F..$.IW.<..=....c.>!..w.7N..Gf..^.w..@_..#Pp... .].......z.h..q...t...

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 57612, version 1.0
Category:	downloaded
Size (bytes):	57612
Entropy (8bit):	7.9962205728688245
Encrypted:	true
SSDEEP:	768:LfYaMHqDvL0rZBalyepBnWYRDgl5vlGmwhAo0lHz9AMkMT/C1hwpDltJKgE08RNW:LfTA1iyeXSjlplTCMkMT/C1GpDqwNfN
MD5:	10D2BDFD7A17F5E0210C90D99A8B5ABB
SHA1:	89CF52504233C328782A7250F56DAD603FA74A91
SHA-256:	D8977152B314FCD5D04BEC050367C0AAFA91899501593E9ECB0D6090CDAC29A6
SHA-512:	5C9174103871D7C0AF82050EB056CE6002F6867BA9C97B0A833285CC9F28326AE4534F8F93A5231F185BEA8941944002415AE3B63B79DE4A973D9E02715EB569
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-4m0qyriQwlOrhSvowK_l5-eSZM.woff2
Preview:	wOF2.............................................b..^..T.`..(.....m........r.....6.$..p. ..j..p..1[........=.2........`...).m...........t'.d.T....../I&2..\.."....8.m....2..tJ8)^...Iq..R.h,..i.er.W."!gC..2YL..S...................,..Y{..X.....]..9^vp]...T...}PKA...e.\u....A](...E.:.u._.xH?....F....7c"n........&E....:N.^.<`f/.[N}.B....T&..\.......L...?/.......j......lb..3<..}Hd..n.kW....U.....z.'8n.........P!s.j..{2..m....J..k...D..+;..~..F...d.......DK1u.....{+F.#..`.`...#K.d.Q...h........b.`..0.....R../......H..H:....nN..$..a..J...&...zi.l.mg_(.%hK.x..3@s.W.50.....5cl.a.5..4@.0.#...T.../?R?..}.2._...y.v..-..-l.XL...S....-lu.d(.90.......D....c#,.q...h...w..a.l9.-.o.v...> Q.A..Nq)}F.Vb..:.9....kY..V.....1Y.D.....K...9\2...d...J*.........C.....A....U#.....x.(CP..p.h$.....>....w..5...5.YJ+w.pt#q..b...b;{...tj'T.r.?..k.P.T.s._.."...h..N..fw...{..w...&..... .....+y.H...`9Y0...m.....!....jtT..3..?...2._.d....8%.E:.<{..@...............53..A.a.a..w..n..@

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32644, version 1.0
Category:	downloaded
Size (bytes):	32644
Entropy (8bit):	7.994593554315655
Encrypted:	true
SSDEEP:	768:1s+Ex45ogHxE6B82ParxH53mhMSvQCwpJXX+13nzkovdU4Cb7:OVZgHx3B8EixH53g7NOHynzlvkb7
MD5:	3F02E1AEEA84F97C26CE78E796009467
SHA1:	3A86908B3E689621F23A326A8F3FD4B794599C00
SHA-256:	68425336934A956337B4593A3D47D51D2970D03AC4A9C9FC795596F13EB21775
SHA-512:	6574651139BF6A97CBBA6E020D6208CDEA122BB2BC1F88DFC4EF7CCA877CED229E5B5C6D2D7C2E2EC60C4AB56D8EB006AEE2E335258F04721C6E8A71DFF0EC78
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZogUQ.woff2
Preview:	wOF2..............S,... ..........................>...l..6.`?STAT..X........a..H..6.$.... ..,../..[.+...r......!.na=3..;.......`.a.2..m..t..uM)n.......d.v.z...E5.......N.s...Xji...0'l.pG......ll.#.8......j.....UR....>...:(.H.!..U3..i....D..Ct.-.y~..w.\.).........?'..=)...<)....v\|..b9.A.5.T....>...&].a..iFj.....u...\|O<$g.#.$.xQ..frE.i>qS..&..U.F3.@.7....k...z.=.WB...r}...Of._..u..;...I.',..(Z>47...Mq....eP".Xq.#\|.._\|..t..H!...3.5..Q........m.x.`c.+7Vo...#.+........./.G.H...Fi........7...~..Q d.LT+.o..%1..,..~....;..Q.(...K..D)..........h.Mb.I.4....S..\...L..._L.......?....a#$FI&"..,.P-.S7Ec0%..........}..I...".j.D.... ..r.n.G....8#..XTG.....g....Tw.k.U.....F...<.......{B..J'..QV\.-..."G0....O5..... .Zf=..........O.Z........_....G)......p./.m{.B..di.C/N.....hJ.^.....&..`:..T}^.D?..eN..^..nG..x..[G..&W..v'........K.D[Is&..p.@.h.T.......H.$.q...B........l.f3#4..QhQ..p......&.F...P..J...Cl....m.0u.a.a.......o.*...E.91)...a..i..M..K.\|(...:......?..

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 58200, version 1.0
Category:	downloaded
Size (bytes):	58200
Entropy (8bit):	7.995376794548573
Encrypted:	true
SSDEEP:	1536:3UV1S86NRte5BASlzNxTDbdQjCOntRISh:3UVg8I6ASnxPhQZnsu
MD5:	895A08A8F8DE0B5D91F3F6999243B76A
SHA1:	3FB36CEC53FDFD5CE97CBD34FDD0A6E5D8255B50
SHA-256:	AADA1AC84EDC0A0F678A12E87B835B9C5A71FC4CEC407CA0420C6561CB53A439
SHA-512:	C82E7D5CE1BF938BA00FD6531702DE3F89045E9C9F9B0A3652F237A02887D02B24D5B07AE2D1FE7805525C21CEC9FB47FB1DA775BB0791EBB4A8975F86AAEDD9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/spectral/v13/rnCt-xNNww_2s0amA9M8kng.woff2
Preview:	wOF2.......X......................................L......".`..p..F..v.....L..Y.....6.$.... ..n.....J[.x..Cnv{...@KD....m..........}..%k<QoS...m.4...8.nO;...............tv..#$@....Vl../.#...D....:..(.wJ.>S.r...n..A.._bNi]......0...d2a....y...wa..}....A.T..Z.h..m.b........D'.Q...K^........4.q.....Fx...[....p#......u....4N.{..4.F.Z.>.7..F.WJv...n..$~....h...@.....b.u.P{4..B..'...Vb(.A~.....].Is.]....G.F..i.4....5.e.d.e.OX.;>.z.>.<.5tQ.j..\|.).........C..C..+....Gm.U..Z.M....m......q..O..J...6.{qkxn.._.....S..'.b....h...s.W.[R....%.......J..b.D....g).....].d.M.].m3...S.E.Y$1)lUR%#.Dz..b.........(....f...X.C<...+.5L..C..y......^.a9'..,.Y.....\`T..M.rP.p..c@9.V..;..}..../q.@Y.*......q......6.k../.....:..!...].\|.j#..2....[.f..l...F...:.S.Y`q.....E.5Z....."." .&..a.0@sK...m........f...F.HIA..z...._..W.7..z?....o.>./...f.3..Y@...~.n......c....'~..87_U7.(...&"..u.\|...nh_2..s..;...Q....F...z\../.;w.....F..Y....M.,.....(.....N..L.ek....

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (844)
Category:	downloaded
Size (bytes):	507319
Entropy (8bit):	5.747078425421055
Encrypted:	false
SSDEEP:	6144:sKJI5a5Nzsktq9Muked00pL9FESMtq2QZG6ataGlfOwpx1TMRQrT:9g9JMtPQZG6ataaOwveQrT
MD5:	0CB9F8E4A3FECFD2F8BE20DE4FE16DA2
SHA1:	DB76850823A32E5389D2A3E2A8C9BF05F6399E14
SHA-256:	43347A7C737906BCCC0B88AFACC1128E9C8DCDF1A8624C05B76325265EF797C3
SHA-512:	A127CE67D1BD31CF3E2BE8BEF9CE5AA3FCE4A6E97D59BEC9C5A51F2D2452A3B4F62913135F92FAC2DFEEA13C770DD8B9EA68DE711940CD0FDDE0F8AD3A717E38
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/freebird/_/js/k=freebird.v.en.5fAGSsMcBN8.O/am=MBg/d=0/rs=AMjVe6hbIiASzM4-32J5zX7utnFvaDiUcg/m=L1AAkb,QvB8bb,bCfhJc,u9ZRK,pItcJd,yZuGp,sy3r,sy3s,sy36,nAFL3,sy33,sy3q,sye5,sye6,sye8,gJzDyc,aW3pY,mvo1oc,sy8t,I6YDgd,sy4i,sy4h,sy4j,sy4k,sy4p,sy1n,sy4d,sy4f,sy4l,sy4m,sy4n,sy4o,fgj8Rb,sy4g,N5Lqpc,IvDHfc,sy54,sy51,sy83,sy9c,sy9s,sy81,syb9,sy8o,sy9,syq,sy9e,sy9l,syb6,syb8,sybb,syba,syb1,p2tbsc,nV4ih,sybd,LxALBf,sy23,sy27,sy3y,sy22,sy2e,sy2t,i5H9N,sy5e,i5dxUd,syc6,sy2i,sy5g,syc7,sy71,PHUIyb,qNG0Fc,syc8,syc9,sycb,sy7q,sy25,syc4,ywOR5c,sycd,sych,EcW08c,wg1P6b,syca,sycc,syce,sycf,sycg,t8tqF,SM1lmd,syck,sycl,sybf,sybi,sycj,sycm,vofJp,Vnjw0c,QwQO1b,sy7y,syaf,syae,sy7n,sy9k,syah,syag,syb3,syb7,syb2,sy9i,syb0,QMSdQb,X16vkb,WdhPgc,JCrucd,sy4r,sy4q,sy4s,Ibqgte,ok0nye,Hzqecd,Vp87Bf,DhgO0d,sy6f,syea,sy6r,syeb,sy2f,sy2g,syed,sy7a,sycq,sbHRWb,syec,cNHZjb,oZECf,syau,KFVhZe,sy4y,akEJMc,sy4z,sy50,zG2TEe,sydb,fvFQfe,CNqcN,sydh,TOfxwf,sydm,sy2s,sy6d,sy6n,syav,syay,sydn,sydl,sydr,sydv,syee,syef,A2m8uc,sy56,sy52,sy53,sy55,sy57,jjSbr,sydi,yUS4Lc,KOZzeb,sy7h,sy7j,sy9v,syb5,xKXrob,sy7i,sy80,sy9w,sy9q,syax,syb4,DPwS9e,sydx,sydw,sye2,sydz,syat,sydy,sya5,riEgMd,sye3,lSvzH,sydt,oCiKKc,lWjoT,sW52Ae,syd9,sydc,sydj,sydo,sydq,syds,sydp,RGrRJf,OkF2xb,sy9r,xmYr4,ID6c7,syeg,rmdjlf"
Preview:	"use strict";this.default_v=this.default_v\|\|{};(function(_){var window=this;.try{._.u("L1AAkb");.var hOa;_.sD=function(a){return a?_.Bp(_.Ue(a)):_.Bp()};_.tD=function(a,b,c){b=b(c\|\|{},_.yx(a));a.Dr(null,b.Be);return b};hOa=function(a){this.j=a?new _.fx(a):new _.ex([])};_.uD=function(a,b){a.j.size()&&a.j.el().ownerDocument&&a.j.el().ownerDocument.body.contains(a.j.el())&&a.j.focus(b)};hOa.prototype.va=function(){return this.j};var lOa;_.vD=function(a){_.Q.call(this,a.Ca);var b=this;this.j=a.service.Gea;var c=this.j.Nb();a=function(){return _.Xr(c.body,"keydown",b.o,!0,b)};c.body?a():c.addEventListener("DOMContentLoaded",a)};_.D(_.vD,_.Q);_.vD.ya=function(){return{service:{Gea:_.uz}}};_.wD=function(a,b){a=_.qD((b===void 0?null:b)\|\|a.j.Nb());return new hOa(a)};_.vD.prototype.o=function(a){switch(a.keyCode){case 9:case 38:case 40:case 37:case 39:_.oD=!0}};._.xD=function(a,b,c){var d={};var e=d.Tc===void 0?!0:d.Tc;d=d.preventScroll===void 0?!1:d.preventScroll;a.Tk(b,{Tc:e,preventScroll:d});

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41288, version 1.0
Category:	downloaded
Size (bytes):	41288
Entropy (8bit):	7.9945345147413285
Encrypted:	true
SSDEEP:	768:5vEL7O6uEehQ41srh9FX9LELWQL91cJpWi9l04QFMu276l3b020Xs4cNDcx:B2SQnh9FNEZL91kpHQ4L76JQl/gDu
MD5:	C2016E340130CA6E2ABB66D40055B6F4
SHA1:	9A999B20475FE5CA7314918BE5BC09555EA44022
SHA-256:	347B8E3E68694A70F4B024CDBEE7FB7ED5F98C19D0DAFEF6B8F237191C796F03
SHA-512:	975CC5E203B9BD6D9312E30D519938DC0C437ECB7C1FF8A1FA3328B21413B4568E9CF6B1105C5C0DD9F9F61912342FDE9ACCDAC101963381777A65954EE1DC92
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq0N6aXo.woff2
Preview:	wOF2.......H.......0..................................8..:.`?STAT@..d...........h..6.$..L. ..f..^..[....5..$.Y.......H-...............q0...p...... ...9L.......{.........+Z..u..{.m..m.gd.e..9en...-V...lT..Rg..e..j..~.tzW...bg.+..u.I.T.z.u2w.!..g....PM...kd...9W.N}..6......l.".a#.D%...d+~..^.MW..uQ.z..........J<..:Hrb\.6.....WY/..k.q...;u......O...x.l..6....[.:.q.a..h9e...h...P..X.l...O...?.>......^...,^..d...z#....VDF]?..M].t.d........D..=-..%.....s......{.y.....fc.2+B.B.......woo...0..1.'R.".6Y.ba#.XX...A..E%..(.D)..F...Ao..A.....8K.u2_.....&..\|7.....6...T.8..........;:.Q.AA.`..677....(..s...oV.=[...v...v.W.^{$...\....](72...22......22..(7.......l.m.r....V.$d.y.5P7....Z......H..$!....8..\|.....Y......3R880.....}Q.a.0..k.W...l...>..ov...BR#........L...K...\.a.......'.I.<.L#..H..D../_E,.l..t....y......".....x..P..@..(........S..m...%'.R..A..F..9.....NM.........K....A..3o/...!...@..?cH.\~-..2l-......kf...h4p...=!QJ!.........l..U..x.,XbKi\|.I..

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1510
Entropy (8bit):	4.0355432662902455
Encrypted:	false
SSDEEP:	24:t4qU/S93QRhYj45kRHDu9+u1lUetmCmifvqbbLaHu9HGn1u1lIdUWA/jTq9Km2zQ:A/S9rU5I1YdtmMqPLmum1YUUZ/jTq9J
MD5:	CECA603BD198568DAB00E6DFC3120706
SHA1:	871C637521103DCE8F6DF9AAC0D1B62900D511B8
SHA-256:	F4AF84EFE90891185D9B29A841181CA9D26D7560864EA47B6CD709D3B964AEE3
SHA-512:	D3F4A52AEADEA52FDAC82C8B9A7427897359B43C3FBCF3E79AACBF30571B3482C991C5346069CC5DDD474C3814CF6507065C4914369C1236FDE641A934A08706
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24zm15.76-2c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52zm28.58-8.03h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3.52 1.74 0 3.1 1.5 3.1 3.54.01 2.03-1.36 3.5-3.1 3.5zM38 6.19c-3.21 0

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 116852, version 1.0
Category:	downloaded
Size (bytes):	116852
Entropy (8bit):	7.997713935602442
Encrypted:	true
SSDEEP:	3072:bDllz3cdHVFRX/KmeqWq6kqLw37wjIX4yUyga1SX:XllIJnNrb6kqLEFIRiK
MD5:	9FC7A466292A81DBCEB5B9F194B87757
SHA1:	B9994940CAE8121BB4ACC923972EA0B0B6BF177F
SHA-256:	8BA9D0704A43A49CD21D4917C76A1828BF6D60EAB09612A2049199652465BBFA
SHA-512:	5A721B05C621E2A10642A275372B21A4A2813F37FBC24B8CFAA2EE2D8F95D06737DD17E921D4BD90C50A17BC9325B14B4ECED296BA9BDF92DF8B5389D9268C19
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ebgaramond/v30/SlGFmQSNjdsmc35JDF1K5GRwUjcdlttVFm-rI7e8QI9_.woff2
Preview:	wOF2.......t..........................................h....`?STATD......... .....P..6.$..L. ..L...n..[M...1.....8DE..Z-...fH}.g..9."G..f...W9..C..'O....yfU%. M............X.<..I..s6=.J/.....Q@..C.].b."r.eU7=..L?...L....(m..-4.uq8.t...JT...h.H.s{P;.&.7.J..L3....p..-.JM.G....[......&"".U@?`6;.y..I...f=..y.Z.S.........G.._.....m.h....c.....A. .Ul:rv".."...+[.^.&....B..-jz*..u.C.,..e....'?..(.zu..J..!..f."..H...1m.m]....b.xX..w...D]..m ....Ob.b.2......`...!ix]DmV.$.QJb[..C\|j..S....h....9:..Bs...bD..<V....rO.#3......P....I.S...F..=..<[.......lL.."...`.vH.h...5...4..7..b.{~.......Y..h....kv..}.......t.H..R}Im...8{..@..J.2..{.Y,.9.....&x..4..5...../.7.-_do.9{.=..._...m..c..}E.(5)...vdM.o.4;...........\|6yzo).igF.+..V)(..TV.<.M._sb.s.d>d..)..~.t..,...n.g.y.\\.....).4Ml._P.s.J..k:.5..+.A.v.....5 .9.UD.D...Kt.mG\............ppg.$.6...'RYJ......3D........E..1-...(....%$@...L.T...i)P.B.h).RJ......P....t...+R...P.....$...i......J.....v..X....,?......[..!keF

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 126660, version 1.0
Category:	downloaded
Size (bytes):	126660
Entropy (8bit):	7.997861876113917
Encrypted:	true
SSDEEP:	3072:nIMBZfE3pqhzhi59cQ34yg5HU38AkEUkautnlCtzfrgV+U0WH:lBRPA59X4yj5kEVautn4i0TWH
MD5:	E171410D243718D27D3C6BD5306ACA68
SHA1:	6BCDBCD43497AE839A84A26FB83D68BB07A4D5EE
SHA-256:	62205E2E2B22EFD49A3A0D1C10C5F59AFA8F4C59B087825FB904263E73489DDC
SHA-512:	B2167AE822A4CF64460FC88430B1CEB7B905EE35F88F16EF817BAE2FE924053875AB73E6BB170B3808C16D74D6B62E86261FFF0931C75AB0FEF5CE4217094908
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ebgaramond/v30/SlGDmQSNjdsmc35JDF1K5E55YMjF_7DPuGi-6_RUBg.woff2
Preview:	wOF2...................]..........................>...<..P.`?STATH...B.....P........6.$.... ..h...J..[}......xw...pE.......!.n.y.A..._......8\|k...7.Au...HD...&W...O1...............o9.6y3....!... .p.?...j[+.0WQb..B.b?.A.....Q.n.....X(.L.0..n..=bf?........\|...'....i'eT)U.\.2J.(.J..-U.Wv5.^..{n...........:,.E.a..Ix...o.t.....h..L...:........Z...+....D1...Q.1..Q..c..x..)..&z....b....cQ./S...6......?.9.d..0......@j...0.....L?.;.g.zQ.R....">..U.U..d).,.ZG9.1...b.U....Mn.=....q.......].+tqt.4..g5...$....(<.I&.4.kD.XV.\X>'me&&.W....".....BR...Tvws.z4y.m..{.&.6..=d.`/st.`..<..)I,x...X.G.F.....\.......==.].[.x..e.x...w..<~.X...i()MG._.)a..$$!.H......z.R.....z0.$$..f..w.....e...HB....?..gY..(.....W..gy[@f..O5.......0;......E.>.. .3!x4l...A...%.._/.h.c.w.e.(;d.H\|1S/YL....}..M...0j.Y.~.......#..k..oBD5."...%..fXZB...............^....)..D....n..f.f.m.U..c...~..E\|...d<H..%.....6."%i..b..5....?s(o.kM..~......_.....<d......i..~M.\....~w.....L..Q5..5]3

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15447
Entropy (8bit):	1.7278338539839808
Encrypted:	false
SSDEEP:	48:b/68u+k29W8sEvlxN+Y9Ml6BCj1L81/L8C+sc5IY7J9FPm:bSGkEWRQxNXesc5lFe
MD5:	8DF19EC399BE913884590015105AA584
SHA1:	5502576575AFF37A626934FA655C124291C58AD6
SHA-256:	D48A0F5A08249E1768C06ACA31C16D50D1216434E1C91BA322CF5521577A59E3
SHA-512:	89D09ED10A4E440A423443586F111E247C3BFB1BE58AEFC3E62586354EF21F0CCF66619F54F6BC06CD81DD81C57B60DFB3D052C37AE8DC0E972963B67B3380C0
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/spreadsheets/forms/favicon_qp2.png
Preview:	.PNG........IHDR................a....pHYs...............;.iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2015 (Macintosh)</xmp:CreatorTool>. <xmp:CreateDate>2015-08-12T10:01:56-04:00</xmp:CreateDate>. <xmp:ModifyDate>2015-08-18T09:59:41-04:00</xmp:ModifyDate>. <xmp

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 3640, version 1.0
Category:	downloaded
Size (bytes):	3640
Entropy (8bit):	7.935496811135212
Encrypted:	false
SSDEEP:	96:VyjYr2gmTOswu8lSMMVAHI/qn8A8E1/fz6S8Y:I2zSOswu8AzG821rT
MD5:	421B045B5EB019D56F6407AE63E57A92
SHA1:	F0D0D18A1887D371B18C1B06B99AD2D3C0923E8D
SHA-256:	5DCEBB5EC80A2DDAB469A77F1A37412C34205EF76D054131083B0BF663B786FB
SHA-512:	A426E4F8C2F2397038F4A1F60ADB091BA097DABE9C4ABF8967F80B20C98F1A7569DE9CCEED89716329FBBAEF0DD0AFB4B5EFF0E6C96DB152ACC86F1CF799C2C9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-440qyriQwlOrhSvowK_l5-eiZM.woff2
Preview:	wOF2.......8..........................................T.`.\|.....m....0.{. ..6.$.<. ..r.W..1...#..4...lc.K.e+c.@3.gq.:#..n....CYG..Q...W.sN...If..w.?7A....5..Rh......D......c.Iv...w........T..dMy.?...x$.H-.5.....GQ@.....G]..,..\|H!T...x+mK.M-....X.u0n...O..5..mS..+J.\|..CS......E...#........,.%l\...v....?.}...=.Fu..)eo./w3...8..i.lf..!y"U...3:.8..vy........(..(..c...!....4....1.....0..`.....Q..4\| Z...j...B....h.h.v.K.(4.d..o..J%`(....zP...0#...y..#..B....#..L.......C..#..P.>+.....@.X....m....F.........AO..t./..X......(.....tq.i....P.....o.M..).m.......bX..n.1...n...-.;........1kR....p..w]0.x.fYz......[W.^.Z......#.K........... ..:...x..O.Q.8[.PK.(.w>'o........^..KV.H.+F.1.qh%Whx....Z.).3.4{..;.K..w0....N .Dn.Sj.l>..\|Y.....&.U..4.^../<.@3.....VBhD...P.8...&.........7.e../.....G...}x.Ne...,.,.n.....T..4.6`....i.M..+.YC-..]@.4.6..qi$%.Y2,.L.=...6...u.10.g.2%9..;..fC.j..P.2QHv..T4......X"lz'..n..N...5...\|...4.)\|...($..Y..9.3...F.t....rN..

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26992, version 1.0
Category:	downloaded
Size (bytes):	26992
Entropy (8bit):	7.992281768071691
Encrypted:	true
SSDEEP:	384:0qMvx5Q6PuscBhhGTTMJzBASBFa99ITYpp1b2Q17kUwBkEV50x9Xg96Dsvv9wO:0qMvx5Q6Gsah2T2BAuTYwBppri9XhS3
MD5:	92BAE553B71BC6DEDFB17E73BA5029EB
SHA1:	4B581AF52A479729888031EB60722A306A68DA55
SHA-256:	49BE4E1A8B5E250DE2A7A738CAC6C157E4148414CAEAB4055D92DA8152D95619
SHA-512:	8895176C2915FF0AF40D923256CE4371B639B24945D9E4183B8146EAFFF8DCA58E87E3CCFFEED8B2CAC88A7BB2906875C4E3CF1DA6B39F4563821A8AC287E130
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lexend/v23/wlptgwvFAVdoq2_F94zlCfv0bz1WC9wR_LU.woff2
Preview:	wOF2......ip.......8..i...............................D....`?STAT........<..A.....6.$.... ..h..x...!...s.!............gK....r..u&5{.H.IgT:....?5..qi.i.c.m.^!.L..dZ ..=.%2......m.....\Fr...=.,a%..D%..1...r.".o-s..N%.9.u8.s.1&[k..B..m6D:.t..M.z.;..F@.A.RIT.I.y.Q....N.. kG..dD^x.....bs.JLb..2.St..f....\|.Y}.M\|.y>!.p.\|../sT?T.c'~.......g<...D.H..Q..'}...........3.+.....fN].D...."0n....?....$..)@JR.\ ...n..WX;m....d9.R.?.....B.....R..\_...~.m..V._.ml.9pL..Jj..(9.Mi....rL.`m.`.S.\|..g....?..O>...)...hc.f%.m.6.7..Z..c.T.....%...n.Z"..i..G...\|.=.A1:..9.......r....+=1...........T.5.....5....B......F.,Z....)..E7..q).!...:.0/.V.9O./......}z1)`8..T....,.......I.@..?.FT@q.M...{S.A.c....sI........ .K..5.mP....Wg.s.'....IuaD..........~.+......`.-.[.....(g#.........,..[..\|r.u...3+..J~......p.=...1.)o..W.J..45.f.8..A. .Qg..H.N..O..yc....."k....w....2\.Z...q...a.7....C6.C.....fg..3;... O...........9.gp.F...o...I.O.W.Y.....<P.R$..{.d.6UY..R4.{V.......!?.x.

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (572)
Category:	dropped
Size (bytes):	1507
Entropy (8bit):	5.491639601465619
Encrypted:	false
SSDEEP:	24:k1tuewADsq4gHUpShOs52XgHomSZ9FhqGqhaZ1MZi6GQFHDSj+RVq19pjWhQr1a:q7wAD14rpShOFXMSZbhG8QktQx4+RMBC
MD5:	D348D09AB2DC99255360DC2984C60521
SHA1:	AB62523A457EE64937583A7E0280FB8842857350
SHA-256:	A9FE46A6C4839B2C3176883876ECE77AFB7616BBA848889C1C6F6690C97F0060
SHA-512:	94AF2C14F6CF6CBA6A41B0F7607A5A64B327CCDA6EC23813E7FEC8C0A55E5F2110C0DDBDD316E6F1B602E8A3AD16E1B9FEC4F08804D17F43B3BEAE794FD0D88F
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_v=this.default_v\|\|{};(function(_){var window=this;.try{._.u("sWGJ4b");.var Krc=function(a){this.Ba=_.q(a)};_.D(Krc,_.F);var Prc=function(a,b){b=b\|\|{};if(b=b.n9)switch(_.zh(b,2)){case 1:a.Ta("MIaCgc");if(b=b==null?void 0:_.aL(b,1))a.open("div","fFsnHe"),a.Ob(Lrc\|\|(Lrc=["class","rRld8e"])),a.Mb(),a.Ta("lBL31d"),_.U7(a,{icon:164}),a.Sa(),a.close(),a.open("span","Pw1xR"),a.Ob(Mrc\|\|(Mrc=["class","FczIpc"])),a.Mb(),a.print(b),a.close();a.Sa();break;case 2:a.Ta("EXhbA");if(b=b==null?void 0:_.aL(b,1))a.open("div","QqNTyb"),a.Ob(Nrc\|\|(Nrc=["class","rRld8e"])),a.Mb(),a.Ta("m6mm9e"),_.U7(a,{icon:139}),a.Sa(),a.close(),a.open("span",."lJICRc"),a.Ob(Orc\|\|(Orc=["class","RHiWt"])),a.Mb(),a.print(b),a.close();a.Sa()}};Prc.Be=_.wx;var Nrc,Orc,Lrc,Mrc;var V7=function(a){_.S.call(this,a.Ca);this.j=a.service.Lb};_.D(V7,_.S);V7.ya=function(){return{service:{Lb:_.jD}}};V7.prototype.o=function(a){var b=a.data;a=b.type;var c=b.message;if(b.Hc)this.W().Va("XgsRcf"),this.W().Va("Jj6Lae

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 4344, version 1.0
Category:	downloaded
Size (bytes):	4344
Entropy (8bit):	7.937797980739236
Encrypted:	false
SSDEEP:	96:JLTn03nQsDwAbFI1XLKrlgbbNaF8l5efEY5TMDg+P/6sJA6L1:JLTHKwAmxLUlQbNQW5edWg+Xtaq1
MD5:	E5A3502E3717398EE835D98F84874738
SHA1:	75C4C2D0F1A2EDA7E16A16293BA840E19991EF1A
SHA-256:	E5ACBE17FD4E63CCA2CE1B72E482FC2411D27D9D534476AD7F0108B9DF087FCE
SHA-512:	609920E215906893F52928F75E2A7B4704F5FCD4D5D8F2258A9D410EFD06270DEBA734F41F6BBAB7C5FEF693C40A2CF3A84B57250F360484D2789C928ED202EF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lobster/v30/neILzCirqoswsqX9zoSmMw.woff2
Preview:	wOF2..............".................................p.`.l..F..m....8.L.(..6.$.L. ..<.}..<.. E.b.8...5..F.Am.......z=...$q..".........].)..~....3'z...0.v..r.....2....L.!..O..?w........X.Dd..X.e.....U>}?:.....c.}..m-..........@......]A.K#=,..M.+....k.gE..... .e..}s.4Y+j..........]!yHI."..6....../[....l..X.....M...zD.tQ=@.'.....4..E..jk& .".. ..{...lA.<.-.@.>.nB...J;9$U.}U..m...p.?.^.$.9...d.........;W@ajktUe....P......B1..o.....M D..Hb...i.:B..2..).U.:....U....yx.z[.....:...M.......r.....3Q.....835..Z.`.........J..........v.......v..a($X..B..OCdd..hLxQd"I4.MS......1.4....u..@..Q.(...ia....x..'...y%~=..@....l(h.P...H0.....t..H.5a.hXtH.~...;?Y.>.;....q...F<.7.{.i..>.sH....[y.Y.p..W...X.6.%...(F$.M..N.Gw..:..b..0."..`.........R./.....LS..kA.h.A..%. .R...2.^_0.cW Z..C..,4..`..=.X....j.j2J...g..PtT....<y..,.\._...s...{.R...:..".. .@...)....+.3.)...,..g9Bj.Q...O.A....y&.:....eo......Z.2......8\..>?U.O+p..\|./...ra.qHG&...FA}....($.k.:.z.(.....tT@.g

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 99952, version 1.0
Category:	downloaded
Size (bytes):	99952
Entropy (8bit):	7.997773585050746
Encrypted:	true
SSDEEP:	3072:jm9YIoqKNZx+lkLqhB3jeRC2X9SPxK72Hu:jm9YfM/hMZSi2Hu
MD5:	4DC58D8C42A13CD77CF2CD978F639388
SHA1:	221EDE548E9E9CF711595D6511C73CD8EA4EB595
SHA-256:	B93F4669CC09016E4D1AD1836A4CD1EBCF832C22979E5FA11DB4F7C3620223AE
SHA-512:	52D3C3AD61265E984ACE82FF6F1AD5B663E76955309866EF7B7D9EA985AD2917FB06FA8BDD96B61208035FD1E2F7DD26A9BE91322A196A0B628C22BC50242613
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lobster/v30/neILzCirqoswsqX9_oA.woff2
Preview:	wOF2.......p.......,.................................L..P.`.....F..m.....8..0..\..6.$..X. ..<..c..<[#q.....U..t..._MK?...G.u......9.PU.FG.c{y....9..\|............@&..0J\|.Uh.R......7De.A...$3...5..v).(..e..J.TP.B.Q.....1.e#..D.mw.'.W.@..a.a..:.R^c......tv...............pc..c..Q..I.......O>KV..A6..C.B...:..e..5.9XVC..!Y[..B....?.3<.s.v@&..E'a.G....}?I.(k4{W>e.......W1.(...W....w../?.<.%.9.]._.[..v~..j....xm....Zj...S.J.I..9..W3.u.VC.. . ...:;@..<."9v~CTC...Sj.V...q.~.'"....9......F. ..+...E.Q.R3.=13..Q...2.eHR8...a.8>Q.....=....mD1.")..!..m.....J.:..c...^...z.....zQ.V.S6s...A.c..x..I.'...4:/I........G..c.t"Z1.y..M..;.p..y...2..~. .P~`;.6.g.)m..pLRUA..-.}.hg..Z.i.\.iw...v7..f.......X1.....su....=0...8..].&...Xl...e(.T`....+.'.4.y........f.mN...vVtT..B..........7.sSRr.Y.c0:.C1...,.o..{.F.....z..w.6............1,sgD$.d`.S(.b..a^....HyJ".Z.2....'.w..M/..I~......n.w..D..L..b......_.r++......r.z=..Q~p-;@..i.....T.)ju....?...z.H.P.p.rC.q..t......j..

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50264, version 1.0
Category:	downloaded
Size (bytes):	50264
Entropy (8bit):	7.996208458310892
Encrypted:	true
SSDEEP:	768:in/nRPDOHUY6sQaVZNT6ujDwWhOte5ocSYHh0SfncpKN8Mid5BRen7rQy:i/dy0zsQaVf5DwcGx5YB0KOMWRe7r
MD5:	AB5E010EBED9BCFB98CDB5BD47D3E430
SHA1:	5D1AA4B896BF05AFE8978F74E2E88A53B0D9BB6E
SHA-256:	B5477EC958C9F1F06AF0D54F50633B66C76C5E010450283C5620CFC79E57E963
SHA-512:	EEF8BCC39498E40562E6E919969492E20093AC577821C34E85D78387F7B0ECDFA90CF14FFD2A8F64FEB608BA0253397F674E10CDE82FE2CC5E80BBA7CF25BB4C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v35/0QI8MX1D_JOuMw_hLdO6T2wV9KnW-C0Ckq0.woff2
Preview:	wOF2.......X...................................... ...0....`?STAT@........X..#..h..6.$..L. ..v.....[....1v.n.,...u.0..-........a3......7.B.....].............-Y.._.>....""].t.kuc.C..nR.U.......9%#D..G..%.d...f...U..f.C=.l.5B...1ALPh2.2...D%#i..A..o.v..d....w.f.6K.tf. U...."r...d#.UD.....5Y.....;.D~9.up.......i.[.O.).t...0..7..w..%..T......;.9CB....>..\|JF.....~..G..~..........+}...]W..s..h..._.%;/TK....b~x.....l.l.YH.[.AL..h8AL\Ry.t.Z...c..-aBf..,...Y...K@.7..R...Gi..O.........ok.16..(q.......\|,"m..........0.)........Q..V.o........<..r..SK........B(bR(.GJ.....uJ%......._u.7....X`..#.s..Y..k..;.$A.i.r.%...d,.\|...}..D2j!h..I..&...c...Y.d.z..."....x)e$...u...@&...:..g.a<.z..'y....l..qRv......(...[N.0..g.. ..f..O...J..s},.s^U.-.3,.2.yO{.l....[J....G.n...LR....@....$}......f.GF.}/..^..p)/....?$...1.?6....!&...;~@..r'Y...d.r.A.B..f...K...../diJ_.aw.%.......&....a0.f..m..P#.2%....c.."....{.._e...mT....!0.c....b....>...)`.[.C.a.m4.x8...7..

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64656, version 1.0
Category:	downloaded
Size (bytes):	64656
Entropy (8bit):	7.996287850457842
Encrypted:	true
SSDEEP:	1536:22fMmkOQ8l40fU4rMYDtbM/lv4ri2YdBRlJeZWmSbATNfL0lg3y:22Gof4YDBM/lzh1lsbScxfLkgC
MD5:	28E2B282CBDDE4FBEF925AA25DF6FEA3
SHA1:	764C6B373670D221C28CD5DA0584FCEB1C444905
SHA-256:	B1DE6EAC3059CA778E6D2367182C7F11EDC81E09971E56F788DB308A674EA7EC
SHA-512:	54D8A320ADDC0205D3A57D768B80A06B7AD09D47E79DD4248B068E20D0A65F00C5E96871FB6AC09B9CE2B8D8AA77656384FB11F58902A42D55A0DA804F0CE6DA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/amaticsc/v26/TUZ3zwprpvBS1izr_vOMscG6fA.woff2
Preview:	wOF2..............60.............................8.......`..d....m.....\..1.....6.$..X. ..`.....<[W.q.....D.nC -.u.Z..07.A._.N^.....q..nU.$`$......'.1.n..@E.J........0............^.`...d..+.f....;[.;..'2.[3z<...\|....^i.=...X[..6Q.m.L..7zO....XH>....i..m8........x.B.B.(.?.#x'/v...>.l..J...J.a..i..'....#.$.{.tIV.[w..q.&..37{.I.#L&....\..9....H....f.3F.zq2M+F..5..............yPI'...].%..'^.....N.7q.L...!....6`DM.1.KbLF.Pj....'(b.R...Q....b`....-.=....<..{_.......@0(!..EJ"B.`+A..5(.......8.=....r\...\..Xy..b..5.....z'...^.8..l..Ny.....3.....H.0...]~.!...@F..N.B.+Y.zP\|..gg..,.(.^.....x...Z5g.T"7x.:.a..BU.....2=.....S#L..mYQi.k./.77>m....F...].J..o.Q.F..!.1...3f.1c..3~C.1cF.1c..3cF..v.. .$..........KrI.._.K...JO!.z.RD......."...!B......... X..u.p.$...-.........L:L.i.-K!~...\|)..2v/......!.i...".mFR...?.YJM..l....Y.6..G...........2q.t..!dh..Uk`.0t....#.j..O......!&.Ql..9J....y...[qQm..V;_.j..8.a....m;...i..L.c7.`......?...^d..i.1.!..8...#.....

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1528, version 1.0
Category:	downloaded
Size (bytes):	1528
Entropy (8bit):	7.7753709629209045
Encrypted:	false
SSDEEP:	24:5agnVyeL5S2yekPsk9PfKFG8XUxRD5HLRRD14X9Yumi5+MoVOwhdv2jN:5agh5fBkUc8yRDPtudw/94N
MD5:	EB7377208715318B001D920F049E318B
SHA1:	9E428185FC78B5F18B11D1B29353433939B08B5B
SHA-256:	10505DF86B3638BE7B5707A542C0C7C80ED856F14E037BB1C64BFAF712B0AB75
SHA-512:	B6C0273E30938C67D2CC260D04A7E356CA750F3FE332700FC739966041AFC010AB2E04739E6F627A88042EAD1A5B14F37C580EF6E00D6869DDDD2E303DD04D35
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshdTI3jw.woff2
Preview:	wOF2.............................................2..2.d.`?STATH.d....D.L. ..6.$.8. ....u.....QTr...<.m5k..)..-.....q.....?..sW..._..7......JE....FE22.....N}..f.......t.N.!.v,......8q.'......p$.`fJ.JA:S..F.............'}..,...u..A..H...h<0.....G8...9_3.....q.....b ...0FB$,..........W.1...J. ..D..C@H.....D1.a.xp..(...c.v..\|.A../O....K,O......L1z..&...H.1!aN...d..s.....:...f..S..P.A..I....%..)....6..r..].v`.....V......c...a.IuE......".H..i......B.#W.....s.R......m.?...H......$q`X....T.i)C..^w.>]. ..;..Dx.5.@.4.^.P....k..........g3..\|..3.eYb.2hd.2K.L......wg-....;s......Q.'..(5..L'...f.W...L....<..9k%.6.v.$......&.w....w4..k......6..Bj....R.B.r....d...I.5cb.8...{w'...6J..98.q-.HLa.".J?.-.>...3+......)..gtwvb.j.8u..vW."*U.:......y.......+:....D.7=l....9j.v...T8r. .........`...qp=.<Tr=...D......d....H.C.^,..%..S.:.=3.....s.9.$ .8~.Q....t>.6262..8..SP....s#.r.S>y..(M.......I(v..JUL.....$y9.EU...&z:..T....QD..Kn.....p.xI$,.,I.......n\|...N.+

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3814)
Category:	downloaded
Size (bytes):	122784
Entropy (8bit):	5.471725859207331
Encrypted:	false
SSDEEP:	1536:KAIcfKjL4U0J684vynp+dTn3fiAx7pdBdpYby/aeS50frNNyhAnY/LBl68ap+dMo:PIyKP++ljx3d/aecrap+d4T8P
MD5:	724D3986846438E2CACA6014024B685D
SHA1:	D521612AA7399E7AF543E96CA734419A6D4D7949
SHA-256:	665EB302F730C65C8752A1998114C6F4D7F0D5E0250465C18665772D14500389
SHA-512:	BD69BB84BB9F1C326E0271A3D22F82B4A23414EEA4A4ABF2A8A8505A1796E3F6E2B1084AA00C783FCCF19220B74008DEBB1E56108D996606753A9C06C1723ADD
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41584, version 1.0
Category:	downloaded
Size (bytes):	41584
Entropy (8bit):	7.995215789973138
Encrypted:	true
SSDEEP:	768:cnPRm/UHl9U8GO5hwHxngXQ5lUAcPtU6Y3dC52hPgxSJ:cPRS0TjTcnEQ5GPLcdbhoUJ
MD5:	71151932FDCC1AC7E09BF80A592DDA78
SHA1:	7049019D7FA6D570CA9B57525224313656B36E8D
SHA-256:	68C3F849762D80F759A7702F52B6F9C432173951D7D5E830C98CEDFDEBA5E53E
SHA-512:	B438132A3327189B36CDF6675E52A4E319735A180AFA9B44261F3E1C36F5EDC86F4F8EDC873CAD4520FF639D5A2A617C84155F535516249D334BC02BF8815DA5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotomono/v23/L0xoDF4xlVMF-BfR8bXMIjhOsXG-q2oeuFoqFrmAB-W4.woff2
Preview:	wOF2.......p......RL.............................4.`?STAT@..P........w..r..6.$..r. ........[J.qF..</(..RU...>.`.9.[%.N9....#.<H.;.Y.....".....x.GQ.3...p.Tx...r.Zs.j5.0...r..f..i.]O.xZ..\|...&;......j.8.i..&.......]...G...u....F.......]cs.x..a...r7...Udw+.+;P.R..Jh....U...puXL...>A...E........w..l.r.:m...T.VA...o....i.........Y./....H<@.(..0.Rp.....9FT{.}...]..[]....E.."...Tjr^..o..>...H....e H.mcD.u3V}K.......u...........[.D.F......-..v..v.d...1`....6"....F...>VR.......:<.....2.m.16.{.....uw\:..rD:Q.3..k.K%.......h....F..N}w.h..db:R....{y...."...#.N..i.34...<..n.O.`$..$..x/..x...........;...:!v.#.c..`..M..w.1!U"].ce......J...b.....u,g.(.\|+......%.}++...S...>.x.......o.+..L..>~{w...;..i.2.H..M....!K.#F.a.`..1[.-$>..9..y.:1..T.s/....u...V.C..`)..r....B....)"v...d0g+4....I.D.Ii.tw.ar.W.R5mO.......q0.Ys=>.A.U]...>.E.4U;n.....~.rx.....U9..v`.9./._...].$E..B..W....K...p)..)!...u.~...^.....I......N..o..Q......v....x.D..i.i........#.......

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 41220, version 1.0
Category:	downloaded
Size (bytes):	41220
Entropy (8bit):	7.99561943989194
Encrypted:	true
SSDEEP:	768:gPAZkLg3cRlItx1huSxyO1hGxVgw8XQ5OgBRoKYMU1ZS/lgF9:g4k83xPuSxy6kxVgwCQ5r0hjA/g
MD5:	C8D3E0F677AC007C9FADBA09A1C4C7BC
SHA1:	83389D80FDF1BEE58E69DB1F38968404EAC57846
SHA-256:	A9ED2DC63202E8E1E06CC22EB23D39212A36034D90DBC76274EC7F85DEB1D3C2
SHA-512:	849C7C1D32C22286CB4216D92E2FA55E65FC3CD621780153F3758190694C0FB74821533B6F043C081F9B9327E5B911978B8BF7A79E12C1823090A5BE43200DF6
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotomono/v23/L0xoDF4xlVMF-BfR8bXMIjhOsXG-q2oeuFoqFrlnAOW4.woff2
Preview:	wOF2..............Q..............................4.`?STATD..P.....t..'..r..6.$..r. ..r.....[..q.y.g...C..MV0..@w..{.5...q.b.<_...g'.2.z.n..4..{..D..)s48J.2U.LToD ...Q3e..~..3J.K&..6.J...J..X6.l.S..n.h...h..w.N...........2).x...T.^.....~........ .-..a....=..l{dK..).S...X.:....V.......k.?..z.!.>..20v....c......j..A..5...D....M(....v.w..3..:...:.:g.;sgE.M.#....6...E..@%%.OQ...R?.C.n......2&!.2....,B..5$.(2D..Q....vX..X.a..V......u..[..(EZ....(.D.{{..U.dM.`#%F.........Gic....z.O.....k.UJ.t..#...P1A...?....yI.F....I.,..y`f..K.-Z... .....m0.%q....[Wz../.....k7..1..j....{.Py.....e..b..@...g.s?X3.H....y...I.A....y.H....x..a.]..B.(.&Ai@...19.D.4.a..ky.........F...4.N.Bw........... K. A.......6w...5........%DL#.o...>0...C~\|.L....v.B!... p}....n.p....!..;...^.$F..3!9".....Ak....~f."8%@f-u.Op..T..[..r.{...B.H.".(....\|.P./V....v...}T..r+.p....x.....r....?...;fO@.........T....r.$.....w..........\|.%..?...?S....@.5.k..h..4.\|.o..$......4@V7)..:@........>..

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 100756, version 1.0
Category:	downloaded
Size (bytes):	100756
Entropy (8bit):	7.997403019876083
Encrypted:	true
SSDEEP:	3072:u1cBLNytW4L2twQPpIoRuqamQ1SgRwwENO51ev:KE5yttYpX0mR5wmv
MD5:	4498A1A925FD2D5630BA89B78739E194
SHA1:	C757EDCF6538B1F0968F69A7618C564DCAF7150A
SHA-256:	54EFCB5570863B2329C2C677749C85C7ED337F5C16BF38CAEA17807196150293
SHA-512:	3510CF6C3ED3786716329466F5575F63563B6C0DFEC2F78E3CA8C881F6C17EC066AC21EDDA970ACB377E610F1A5C937D9CBBE38DC690A30F12FEF49EDD93189D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9SIc.woff2
Preview:	wOF2..................0..........................<...8..2.`?STAT...P.....D..).....6.$.... ..~.....[..r...GE3n...g.T....&..^Z........Q'..#.Q...u.....+...U6L..$!P.co......4w...rIQs.'.nXX9....@...N.W.....X...Z6SI.(.........I...zC.H.U.[.M."............\.....w.N....Q.w...L-zGg%..S.....Bcwq!].z.H..V..T........w...7...jE1.:.zR.U-.....f.e.'._9.y".$"#.(...M...=....[t.X..Rv..1.>..g.o.P.?..q ....4RsP..I..?........].Oq..k .q...PJ.ii..}?.W.r.BA.Y_.M..........$,.Nd.:.'..r..(.q:/i.e..C.......:...kq.....8.}.8.S53..=&6...+..Y.YY.......o.>....s..x"5X......z...'h.D8<N .E....s....v...hh+........RE..5....D^.....i.i\.f..........~.xJs....n......Gl......%..X.L.VW.1.A.........Us...xp.G.^4.J.... ......#b..=uF..\Z.F....[x".y{....g..>..Z1....`....;<.?.~'.ui.q.z.0...Nz...9.l....h...Qa....\|........R.RjZ7..2h...g.T..Z.U./.....nCj/._..Z...... 1. ...H...&%......es!tbf..\.....h.k.\|......=...1...,.sxI....dcW./k...o....._...{k.N.....:.`.?......`..T.K..k.._.. ...D.

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	3.7445194936804347
Encrypted:	false
SSDEEP:	3:xPX38/ZoS8/ZoS8/ZoS8/ZoS8/ZoS8/ZYn:xPn8/ZoS8/ZoS8/ZoS8/ZoS8/ZoS8/ZY
MD5:	0CCCD828CC09B4A52D2950FDF5CFD649
SHA1:	E1F9AB55F433EF5EA9BD06CB8948262E45FCEAC9
SHA-256:	876BC02F507FACA0FF025DAA05A5A40E32D8AF023F7F672816F7E8A9C22EDF68
SHA-512:	BD295198104BCE34ABDD7C5A37D726480B7F3D6B74D917318685289BFAB10B6B70C7D475C62F8F03A5F1787CDA6031B3489671C372F3322A8492964515ABBC02
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwmpFV4cs7lUiBIFDZFhlU4SBQ2RYZVOEgUNkWGVThIFDZFhlU4SBQ2RYZVOEgUNkWGVTg==?alt=proto
Preview:	CjYKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgA=

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 2560, version 1.0
Category:	downloaded
Size (bytes):	2560
Entropy (8bit):	7.866416223385858
Encrypted:	false
SSDEEP:	48:vsV74S5ahyIWiGdLsQG9/UstEqFvtUYdaxqn78LTxbnBMUFWqeX0uGh:vY4at4Gurk+vtBdak7cTvVF7eXg
MD5:	AAD954B1FF4E297C5D137133C4BB36C3
SHA1:	781A7FFB51D787FA807F1D861A4D003BD33E42E8
SHA-256:	C28A9A498502C596ED0275021BDAEF2A57225D9460C650706907FC95F7BA6D80
SHA-512:	149F0D8CC70A8D6D3567917DA7F43D125BAB19D1B420E6921C38E278196E168E3D3FAB6C2C3608ACBDA01F0A660267B35A5672DF80CC671B3167A4CCE4DE6D9F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ebgaramond/v30/SlGDmQSNjdsmc35JDF1K5E55YMjF_7DPuGi-6_RkAo9_.woff2
Preview:	wOF2...............$................................ ...`?STATH.......L.s."..6.$.>. ..h.c.....(...v..I....y~...KxD=....XL.#...Hc..?.....{.............vgz..E..\.O.(.@..,..........FD5DHW:.....3a1.L...M.C..7Dj`(.\....\D.q..<o...............).>.......-....m.....;.......@..C5.@].9.6..J....}o.........T..F..%$.08.G....g..M..(.\|..Y..(.R .R...9.{aK.`.b/h.f?C/K..9.\|..M`.O...b..i.}....s......O.;.....7.!........Ep.Xx.....#tl......c...>v...1.E#]..k...j.aLK4,.n[.......>..U(c.'..K .....g1..l=.. ....&.9Z..".r..P!.K.....I.I..J..)W.p..+..:....u]A.FGG.{..:e..)w....%...Zt5n...G..;...5!......0...0.`....(....R.bQ...o..l...m].._L...fp.Lp].=..v.u.k]6y..+`...V..k...9:.e....c...c..v..oC.(_....F\|.&..e.ny....(....V&....s6..I..VR...RW.*k.P5j...^R{.r....`]Z..Iij^;.C.QCO..4.a$'.w.HC...E...{....i...2.....K5y.j.....v.#%..n.3...y.o_..:.:....c]......;E\.k...v..AI...r"..1.3.~'..T..{=...N..amh.S...1.."H-.8..bl...U..Wz.<..Vr..gi._..cwB..8.k..~...{.+xx3....C.^...)..k.Kz...lr^

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3814)
Category:	dropped
Size (bytes):	122784
Entropy (8bit):	5.471725859207331
Encrypted:	false
SSDEEP:	1536:KAIcfKjL4U0J684vynp+dTn3fiAx7pdBdpYby/aeS50frNNyhAnY/LBl68ap+dMo:PIyKP++ljx3d/aecrap+d4T8P
MD5:	724D3986846438E2CACA6014024B685D
SHA1:	D521612AA7399E7AF543E96CA734419A6D4D7949
SHA-256:	665EB302F730C65C8752A1998114C6F4D7F0D5E0250465C18665772D14500389
SHA-512:	BD69BB84BB9F1C326E0271A3D22F82B4A23414EEA4A4ABF2A8A8505A1796E3F6E2B1084AA00C783FCCF19220B74008DEBB1E56108D996606753A9C06C1723ADD
Malicious:	false
Reputation:	low
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 25940, version 1.0
Category:	downloaded
Size (bytes):	25940
Entropy (8bit):	7.990402611464527
Encrypted:	true
SSDEEP:	768:h/no+9wjpn4U4LdAoKQfezKLBEKk5727+CmJsABNFjN:hvoZjeU4ioPLLGKkJ2l0VZ
MD5:	472997FA70DA7203D0AAF11F7B166C93
SHA1:	17B746D4980DF5C0EFFCB129B63FFF1FCBDB8999
SHA-256:	5110D967DAD4A4E2D1578B5A1E27E210F03DAD636892CEA6D7F8B1BB617BCF2B
SHA-512:	6BE9C1998D004BDB1299D23B2BCF3ADEE693893018842E9A5DE2E58B19023CADB16FE9A95F6FEF7DA70AFB203871C6C30E530221FE8E0FEA7AC08E911B34AF23
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lexend/v23/wlptgwvFAVdoq2_F94zlCfv0bz1WCzsW_LU.woff2
Preview:	wOF2......eT..........d....................................`?STAT............].....6.$.... .....x.........tJ.U.....@.lW3......G"L:#.......&.9l3O.u`.........CSX5m...i.%W..!...8i...V.I".&V...%J.w..u...6....OU....rLy....c_..t...L(k..z..2.\|S...Lu..TK..../u.Y..5.P.>T........BJ,......&.#....T..K..e.5......D..~....'.v_.......g..D;U+.!..i..D.......I.........O&fm...0...\...!.2.h..&K....$T-..P.."......R^.xt.<....&y....\...h{b.H.../.2h...."."0n...K..]..=o>.U....RjD..G.[.wI.!..Bh.....@.,..W@.A........Qy..X.bD....Ry).B@.. t..s.w9....U....(2....e...cc,..l0`..RO...30..........(.....8......Z.=......bo.E..HFa7%M...8U.G.g.Nv...8x.d..`......a...i3..1..Rb.....H..N..l..x`.[..S.B..t....`.g.C..TB!..I.5tCix.3.b....e.c..E.Yi.T...7...`......L....!..l.9.O.~...X.XH.;s..^{.o).R .."^..\|...R....n:P...:H.v"..+..T.......i...9(...z.`{.. .D..\|..^.Z.?..i.T..FO.~../....f.."...IWUd..`....kr].;};...g.b.Q.&+*'....J..f`....Y...6..x.W.~.."..t.K..dd.....m4.!.NH....q.m........^...

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 84892, version 1.0
Category:	downloaded
Size (bytes):	84892
Entropy (8bit):	7.997781229266095
Encrypted:	true
SSDEEP:	1536:HumAnFGBzYl9bxrG05M5ThANEoO4QrLn2da3f6f7kkz5NCuELhJe56NcYhDpI:O7KQxy05WTimoO4QrT2da3fakrG56Nc9
MD5:	0F0BE34D30705D3F21ECCBBFBFCBE983
SHA1:	96A0C04F6610AE014FC1179641861C1A96DD6DD0
SHA-256:	E05FD4C39D2671D0FEBCF551364287A41D4889CA4692817722459FF34940AC81
SHA-512:	45B00B7B0962DCB3BE109981A9D41682E36767F9A2056F6751B639B96F97824D59867B7700F61C68BABCF35FC1C4E3719E361B25339C10346CCB12694E1492C9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/pacifico/v22/FwZY7-Qmy14u9lezJ96F.woff2
Preview:	wOF2......K........x..K5..........................&...F..(.`..............@..6.. ..6.$..z. ..r.....K[.w.....>..f...G./...=[..l.Awl.e.....m[......p.`.MoL.........d"...Iv.IZ....._ac.6Ls...BWn.Rr&.4.y..]L...i..Ri.$5.>.......W...&./WtpW.I..$!...5.....#.k8.n..e....3...s].f.+.q.~.h..C...rZ..3B...._..d..W..5m.Y..%......H.z.)'M9O.U...yz:.m+-...>....N.:..2...[..nU...<G_z.;;......E.d...J....L1...{.....7..;{....I.K..s...x.JHF..Z@u.l......W.&..dp....#..>/..q&r!..0.0J/.........%.....j...k..].5...QM.O..t...A...m.69p.{..kr........w.v\|j...Cf...c\7...DZ.aL...l. .........{_o.6.cA.D.....a...3jb S..#....G.?C.'F7.. .....g........D.K...8...Z.J9D...T.ynU.............i.%Q.....H.1s........=.... F.T..(........5`."o...0X%.l#6rD..../v.Qo....~....~.!.m..y......g...!. ....pU..t..g..r..t.#1.0D...6...!.z.W6.N..P.$/..9..6.Q......7g....8.#...y.E8..#....?L-.80.B{..O...t..,..[[.E...6Y..T....$[.g...+.KX.. !4.xj.^..e.2+.:W.wV'.T/Z8..MJ...)M...............>.M.-.\|.k{

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50032, version 1.0
Category:	downloaded
Size (bytes):	50032
Entropy (8bit):	7.99687526963219
Encrypted:	true
SSDEEP:	1536:h8sQnAgDeh7Kf63FlHVeVEV9R4998yO5d4NWvFI:6s0AquH1lHAqV9RYJO34sv2
MD5:	3A1D827D4C9CEA1A4D9AC216BF6A3D0B
SHA1:	B3464CCD91897B1DB6CF5EB06E7A4F89F31EDB94
SHA-256:	CC7B21390D89052DA348CF014A9F38412956B535BA362D5021CF9B2707F03DF6
SHA-512:	E2D8C5FC730AB3E648E2DCA07F462E993E2125D777B16A5FE393D1EB3A2EFEEBEFB65A7BACD058AE04B3A6B3E0883F6952824692AE28696011052C7737BBB19F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Me4A.woff2
Preview:	wOF2.......p......................................j...j..j.`....T..<..... .....Z...x.6.$..0. ..t. ..I[K.q..v..T.n2.H7.u%....A.-.r.L...MCx...p...%......8.o;.mw.T....&.Ia...J)%.t...5g.mo.......p..Y....O...yV..j^.Li.5a.1....:66?.)..).G...ptC..e..aS.K...r.....(.w.l..r...wE..iC..F.U._jK...S.mT.j.)>.."....T.{L!.?>7t.....wUn}.d"...:\...0.J..@.....Z...-M\|.8JRe3...a.'.?E........Z.).R..!?....6.%.....gI...../.Wc....{...J$!+ ..$..]XG..}..y~n..{.`..aQ.1.9b...0..#.. ....&..........G+"6.....7@s.ncTKJ..D.........5r..6j0......Ry.Q.~.xq/.=[.3..h..\|SRD.I.....ss.].!)$.I.......9.......d......c..a;..[R_..f'.Pw`...]..~.....\|......p<."..........,...9o...$..H......@.+\...t....5vJ...Y.GI .,.}k......k?O.V.X....a5..X $<B...]..P..d..T...o....d`FFDF.VRqC=l..?..Cn.........%..YB....{#\..o...f-.DdL....}\|.!.=.~k...,.....H^....c;..e[.`.c....t.^...0\|.3..G...u.D0...tN..hX...(.....S\|..a.".\|a........j"...o...1N4..c.n...L.PM...?......jT.on..+-,.e.....b??...yY..k..v.+a.Z........J.,.7.....

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37800, version 1.0
Category:	downloaded
Size (bytes):	37800
Entropy (8bit):	7.993884030418155
Encrypted:	true
SSDEEP:	768:SO2l7xREG7vwgbAhzZMu7I/5WqSdZxoIMfKLhDAm7Yl68:S9HRDI3Mu0UqkPMfKLhD97Yv
MD5:	2B097CB2DC262C764A2C97D4E233918D
SHA1:	83DB49B6B6DDA13ADC82726197CC2B243EF647DC
SHA-256:	7615AED2ED8F1361D3ABA2B6CE6612468463E660E8BD4A4302B24C113EC57308
SHA-512:	74193AA72286C60886138955917F87171F2FE483D6C2F35BB1CF1D17A0390F05149FF73EF7AC5550281A45CB0F9608D9C1BBB3AA5C3DA2843D21F61111601333
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_Of2PRg.woff2
Preview:	wOF2..............7....L.........................4.`?STATD..`.....$.."..r..6.$..r. ..l........'pg..q;h...g.......E...U0.....x.}......Td.6...c......Q...j..M...e5EJ.V'..#%.Y..m....\..>.....S..k.$/.g$.gZn>..0..S..&\Y..A{.......t.......6....A.!.y.Y;.].~..........?G.'...u....U`...Q+NT.._/...}FrF:.'.+7.q_....%=...1....,...=:...A.....,@B.D..x.......7...~{.WAd..VU.../.>.Rb..!B....tX.i$.,H...a.......)....b..z..>........y....1`.`...T.h4....\...b...fV....#O9.$...MCB.W.~Z..N^.6.5..<.x.u.X.....$U8.G`4N".'<Dp.wY...2=.kXK...0..........7.......M.....!p..@D..:v.:.-.o...)...a..8..l....<.\...x.gT..........m...0..8.A>..h...[0...0..8A.%r...{.......f.......L..9....*p..........q.[^6..s.....[h.-.. ....#.E._..Z&.g......)....T7%,![........A.8...b......C...@....Z..9QK{.4.{4.T...o.....D.1ib..Y.9.=.}.3.T.h.b%B.f.&."-R2$.......R....+y...+OW....T.Jgy..(..F.2.}...F.)......^.T.....a.t..i.....g....."....R.J@.s.BU....,fvAp......H../../Q.;,...`..y....+&9.T.(C..sw.;We...nzwn.+.........q.`.

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=97f1xc2u7rtm
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (572)
Category:	downloaded
Size (bytes):	1507
Entropy (8bit):	5.491639601465619
Encrypted:	false
SSDEEP:	24:k1tuewADsq4gHUpShOs52XgHomSZ9FhqGqhaZ1MZi6GQFHDSj+RVq19pjWhQr1a:q7wAD14rpShOFXMSZbhG8QktQx4+RMBC
MD5:	D348D09AB2DC99255360DC2984C60521
SHA1:	AB62523A457EE64937583A7E0280FB8842857350
SHA-256:	A9FE46A6C4839B2C3176883876ECE77AFB7616BBA848889C1C6F6690C97F0060
SHA-512:	94AF2C14F6CF6CBA6A41B0F7607A5A64B327CCDA6EC23813E7FEC8C0A55E5F2110C0DDBDD316E6F1B602E8A3AD16E1B9FEC4F08804D17F43B3BEAE794FD0D88F
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/freebird/_/js/k=freebird.v.en.5fAGSsMcBN8.O/am=MBg/d=0/rs=AMjVe6hbIiASzM4-32J5zX7utnFvaDiUcg/m=sydk,sWGJ4b"
Preview:	"use strict";this.default_v=this.default_v\|\|{};(function(_){var window=this;.try{._.u("sWGJ4b");.var Krc=function(a){this.Ba=_.q(a)};_.D(Krc,_.F);var Prc=function(a,b){b=b\|\|{};if(b=b.n9)switch(_.zh(b,2)){case 1:a.Ta("MIaCgc");if(b=b==null?void 0:_.aL(b,1))a.open("div","fFsnHe"),a.Ob(Lrc\|\|(Lrc=["class","rRld8e"])),a.Mb(),a.Ta("lBL31d"),_.U7(a,{icon:164}),a.Sa(),a.close(),a.open("span","Pw1xR"),a.Ob(Mrc\|\|(Mrc=["class","FczIpc"])),a.Mb(),a.print(b),a.close();a.Sa();break;case 2:a.Ta("EXhbA");if(b=b==null?void 0:_.aL(b,1))a.open("div","QqNTyb"),a.Ob(Nrc\|\|(Nrc=["class","rRld8e"])),a.Mb(),a.Ta("m6mm9e"),_.U7(a,{icon:139}),a.Sa(),a.close(),a.open("span",."lJICRc"),a.Ob(Orc\|\|(Orc=["class","RHiWt"])),a.Mb(),a.print(b),a.close();a.Sa()}};Prc.Be=_.wx;var Nrc,Orc,Lrc,Mrc;var V7=function(a){_.S.call(this,a.Ca);this.j=a.service.Lb};_.D(V7,_.S);V7.ya=function(){return{service:{Lb:_.jD}}};V7.prototype.o=function(a){var b=a.data;a=b.type;var c=b.message;if(b.Hc)this.W().Va("XgsRcf"),this.W().Va("Jj6Lae

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 57236, version 1.0
Category:	downloaded
Size (bytes):	57236
Entropy (8bit):	7.99608783144297
Encrypted:	true
SSDEEP:	1536:L3JWy0wublqOS8eUCwnd3nVvgx5iMYZsFFcnEzHcV12+1w:L5pAbllS8iwndXVvwUsFFUqHcV1f1w
MD5:	212D9F17F0F5D037532FA3B8FC14B8DE
SHA1:	C332A9F57F2C7931F2A930B5D91BCF244E38FC42
SHA-256:	53B183E10D8C5DB234637E82BEF4014117BD41C956C69AF55FA0165A7BE31666
SHA-512:	F36B776390830548F3B7931B223E94301D1711C41D8E9F0AE43A50EAF9B3D0B1FDC66708802E2C53F416A7DCFE8937EFAF1BA0CF15CF83E20C955AA3853D1710
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNpWg.woff2
Preview:	wOF2..............P..............................t..^..T.`..(.....m.....`........6.$..\|. ..Z.....1[....n;.U.p....JF+._.7.Sn..IA..o.l..n.,...p......d!r.}.>I.6PU..f$....);9.R.j.J..B.....PJ..!...u.\|.'{/K.M.L)..h1.......g..k.9^3f.y.S..>].z.o."(......V}.?LE...EyF.Y.J..v.v..E..S...:..+.{......Rag.DOT.1._.....Up..V.V..5.W....xg.G......}.fH"!........'q.....{t...z}i).9.C)E.CR.;..5.......#.W..W[.l......A..D[..m.k.Y9y......U....W...?...o.{...(...$G.3D.c..s...6....;.:.msn..v..lv........{...4..-3.-....T.vJ....-W$...:<.$\.....{>{.u.....&qSq......"L.E4.u.......{^.>.iT..2.d...R...JX....j..X.{g..9...A0....q"C..G....W.e...vM!t.@.=Q......G....3...0.D....X.......pwQBa.HC..`wm.d............@.B v...@.$A........j.......n..uZ...n.^.+..K.o.@w.ap).a..!Q....4....f..Q.k.....1..P?.....a.....'>....5.<...... ../.....8...~.S...z...iT.\.k...;K......D~..K....P.7.?.....P..!.%P..Z....r...U{..'......2kDP.8.......L'..A...C....k.M.P.nJ........$'...bW...a..v.j.hv{+.?.;.._.L...A=b.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37632, version 1.0
Category:	downloaded
Size (bytes):	37632
Entropy (8bit):	7.994612552386459
Encrypted:	true
SSDEEP:	768:j3igNBn3RfzwBFOw6FZ5kUezAtdnMlWCTd18T8b4Coa/a5oUO3ULsegB45r:j33B3BaFO9FEUiATWT8T8bAaCeBEJh
MD5:	1FFAA430DEB705DF128762D9990F8EFE
SHA1:	847F8CA1CF199A602AEF0EF42AEBF5F825584E19
SHA-256:	2706DFABCBAAF2DEE90C3A10C168D5F5691CE787DCAE9E77CD038F66B08FC4BA
SHA-512:	24B0B6016AAFD2C96C5110B4EB19FDB965E4F12007552E710B33F38E7621F3329D28570BA40E25041E17FE27624DE52294890585836590B509F2BF28DD92736D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vqPRg.woff2
Preview:	wOF2..............7,.............................4.`?STATH..`.....p..n..r..6.$..r. .........A.'.m.....h.j..a.......II.k...q........d#.<x=..\|S3..@..;..#....J..p.xx.<..R.....E].&...R.....L....6k..(x.E."H....v.A...x[...1...Z.G....j....q.).....W.D.pe..w.8..M...{.\|....G...KlS..2.vi3DC...<.......b.$.n... ..J0gx~..N....M..S=....j..w....b%z.7Q[.....6......y...(x..3...y.~..Q..0.l@.c.c...t.17.......X..f.Q..z.7...r........,..-..x.+A..I"..M.i..?..?\|..).J7.F0......U.....z..i3..:%.X.0%.'...7..v{.......hCz..y..8u.....!.......`.z..../.=S.Jh...P.....T.&n%V[..sp^.aB.A.k.....f.8..n.i^[1#[..........d......-.....ST.}gN......ZK.Z. /I..b.H..4.y...m...g..#.GI.s....F8..d...V..L.........i.....g${.......t..Q..M...s...u.%K...\|..0.6...\|..<......6.....;.0".....P.x.y..y.\P.B\.......e6..Y.nq9.v$....=....'....?...B....d9E.....,f9.....b..d+\..S.k\|].d.\Y..>.9..[..f.=c]...36.$,~UQMU.@.`0..c......4.Z.v..s.KkM.^..^..E......?Uu......{...0..K...i.6B..A..I5..I.....\|..LN.-k.....1.jPu.F

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43772, version 1.0
Category:	downloaded
Size (bytes):	43772
Entropy (8bit):	7.99497933742288
Encrypted:	true
SSDEEP:	768:nl5ER4tVdeSUthhWfoDHea0tGdFOIHPyCdHLBdv6pGXw9XozpskEePJBsfJM3V:WO00uea0twFO2TdrBgpGg5wtBBsfJMl
MD5:	36338672609C9EC1D83AF4E1AFF7B0AD
SHA1:	287BF3611440E9377DD71C0620AA63448D632F06
SHA-256:	E268433F792E81D03D24617E0A4D6ECB5728278A805E7D12493E06802AA671A7
SHA-512:	6A4F62F6BFB02679F2887CB62E1BAB06F5FAFEB80BA44AED733ABFD0FBD1F8EAF545316958CC8D5FD74E6685D68CDC1BC037FA02810FFF98BC9EB95719DA7A1C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/playfairdisplay/v37/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_k-UbtM.woff2
Preview:	wOF2..............................................d...$..f.`?STAT@..t.....l..=..\..6.$..4. ........[.{..5.....+..kL.J.....)x.].....J..'...R.........IE.K3.vcx.....Bp..G.:D..UT...{C......P@F..r8+..d.!Si.$..F..7..v...{.>..+u..u..,v.g.J..%g.%.D%Q).^2..n....JT..jF.7C..H..8...d..D.V".&...\|>^[.e.l...J.YYD0W0_..n..ulm..y..2...M_<.b'3H..'..+Yb. .w#..h..o.1.coJ........)mO..s....!'J^D....KC.,sa-.?.../Q....3....o.......g.....t).y.=..U.%o..q#k.&_.?C..ff....8.82..W..0...D.V@..$-.BZ.$JE.8...<D....@.m....%.....w..rw.jr.XP1.H.Q%.. ...."..H.(.X..-...A....q...v.....]K....D.QB.Eb.q..</.....y..G..<v....w1/W1.i...O...sU....P.z.L{.K4.T.I.po.^g...]....JK..7}......._x.7.g.a.w.%..r....`..+5.a....>A=......H#1...s.58/..d....#....-?l.[y.........i...p.x....@@.v....AhF4...!........A.....}._.........V.J.(.D(.R.G!.RPa...? .W...Wo......%5h......Q....J#ZI..oN.......I../......K..(...)@....h.R.+...9.9...C.Q........z.u.DI......L..7.p.{...l*J.&..y!.I..C......W..vEk.....k.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5044, version 1.0
Category:	downloaded
Size (bytes):	5044
Entropy (8bit):	7.951901332858743
Encrypted:	false
SSDEEP:	96:9gXfiL8sKiR//gg+2nyE6gbhIs64Ib/i8E66d2Rt+6TRtzBr886h:WPehKiRXgg/nEuk4k6366dS+6TDBrU
MD5:	5E37F6030CF935F9CBD3FF5A22E08D2E
SHA1:	C77AE7DD7501F4F578884BC034004F8619FC3D17
SHA-256:	867352B1C82C47D71A11744E3886441A848780DCA87928BAC596E5F3473BFAA3
SHA-512:	32D2C92FE4A8EA3A5DA9F103F6E36CF035804F529DD488A593A700566FF14A1B6F2A02AB9527818F7891DB88C6DAF5451251D21A6C8CD2FAA637884D142D3C08
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/pacifico/v22/FwZY7-Qmy14u9lezJ-6B6Mk.woff2
Preview:	wOF2..............)`...W............................h....`.t.................6.$.X. ..r....K..&#........<./...1.x."..T.Vx..j.)...UUoG....@..X...d.~.W....l.3H.Y.e.......+?RX.(.Z.#.....#.i...y.~?...x.M...7..%..D"$.....i..).25f..2.........f..%.ifB..mQc....2=4%]I.....WWrQ%..(..g.......k..o.z..]...$`....._....Y"..Y8b.......(m..O..WM:...1."...H..r...B..!..sN..,%In.P....1pH.$.i.g. .+K1.V..{%. ..A....l9.x.P...'..W.$...B......M.5W...j.3..gc%..zk4.[.E............m.q.6G@DT.Q..S...5vY3j.!....i...h...=.Ox..._9Q$WPX\..2..<..R+qYG..H..K./.F^}.....=.\/W<.6.....4.l.\t.......^.Q...Q....`.Hn.Y..Z.BI...eCP.......\....f\|w......5..^..eK~\~p.....$!....S3.....-..e@w.....2..f.W....`?d.'...........)(..8^.cO.}.f\.(...[.;q[.Q..e.wR./S.@q......q.l..q.z..m\|.p.H....9...W.....-...5..ZB:.......YV.jC....[.....7...n;m.d.I.F.ly...O.bW.R.d....c..M...^v9[j....'......r.z_......7./...~A....W.\|Mci...Q.7...9.A..i...\....2.`.W_ ....6...()..s....7.\..j.....@o....m....w...6.....,

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 142920, version 1.0
Category:	downloaded
Size (bytes):	142920
Entropy (8bit):	7.998331954193963
Encrypted:	true
SSDEEP:	3072:wQumXsnnqTz5xa0PfTg2r1coEUOUKO+rE/FYSgEpF4XONoe:wQOU5xRhroqCrE/FHgEQ+Ke
MD5:	643086F598435216DC497F1FE1174F85
SHA1:	FD3050CC2BFCB38D36876B66CAA15D97AD3098BE
SHA-256:	15FCE9FC686A7ED24AE85F394838CCA6DC46CA2AA43DF5E35A9EDCD3EAF3577F
SHA-512:	CC899A561B18A00EBD949238CCEEFB78EBB0D7F61579C20DE1EBC6AD1273D6C393E3CB7DF0A41A8DEEE3B30EC9325F3443C5A760ED9C9BEC93BBE5E185A6C68A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ebgaramond/v30/SlGDmQSNjdsmc35JDF1K5E55YMjF_7DPuGi-DPNUBg.woff2
Preview:	wOF2.......H.........-...........................>......P.`?STATD...B.....$........6.$.... ..P...J..[2..^y..>_..h\|..m.L..M.`...n.Yy<Oc.......<7.c.c...........!......{0R............F...m6.~...p..H.C....P....%Qaj.Y.4....rV.........K)..v].....pF5.l0lJ.F.i`.$KED.......j..'o.s.xi-...u.Z..L..Y...%r.H.E.....(....+..+.LT....@.(..@..Z&$../.....v.e...2.5R.;.JK$&)-.}{s.;.....?.3.6........Z..\.....O.C....,.z..\|...-.#.R._ZJ..<;0..C.\.p.F..k.r.....Uj..?..k.."0?.~...`F.^(.k.[...oP$.6~.5.Ya.....(.o.N/..<..5......s=..r...xa.8G.Wg...Zeb.Z...w.;..D....~."5..-l...0.z.F.,p...h........P$^..s.,.=..M?x.\|.[..[...0.s...Q..x._.Tl..Ej...S.......%I.,>.H....&.g<......Q?..I..W..O5.M\|.7.)\. .$.........J...O........_..>..;.....y.\t_....Zk...t.....2.....O....[...._(q.'..\|..Kt{....#g.....[.$.!e........~.....KOC..\...."........~..<I.Z.\|i...D.X........f.>....3..>.O./...n.;..)T....].-...b.......0k..b:....x.+.....k.U.f..".....U.+.........J..g.3.f9EtETZ.4q../....g.!.....][.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 300, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	121417
Entropy (8bit):	7.984667979078873
Encrypted:	false
SSDEEP:	3072:+zqaVvd3d4dCSG7af90Tc48kNeaRc0pUlY2Fb2U8MtF:NgvX4d6afCTc45NtpUlY2FbRzF
MD5:	74EBF5653231DD466BFA4B6885E18DD6
SHA1:	DEE458A4AFF46025FA5F57C468E976DED5B646C6
SHA-256:	D548DC57C5443817C5981A9F29C6958CB432A4F9CF1DC334F9F46E9473ED78F9
SHA-512:	9375EA171D933A4D2F04D06F11B14D3DBB471623D66343DB6E8A2E58915397EC8FED562FA2B3A7B9C33809808B98C63D94F895A4B43AF9D36929A764D1475A4E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,......c.b....PLTEg.....}..e~.a}.{........l..r.....Wu.u..Gg.m..]y.Rp....@`\|Ll..........p..y..j.......+.........[y.<Zt1;F...............8M`..............'-5......7+....YP>xvs...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................r....IDATx^...s.....I=)QU..].....rl..................vIr.,.I.7...L...=........H......7).M....A..i..\.rJ....ed..nSj..........W...;N.-.. 8u._j.!.<.4....7%2d9...~Z@...;.yJ)/;1uB.r.@..

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	199537
Entropy (8bit):	4.705288692920627
Encrypted:	false
SSDEEP:	3072:ybBsNrYiYbRTdY2kfzYjEBtluJZ0+gwZC0IoAl8oDkDsDvU/J6/J9/JDJVQjj1P:y
MD5:	53BB04865802E54AC8AF8A4B671BFA1A
SHA1:	C330354F2BD383D4A86E0CEB9E93539457E09215
SHA-256:	42E25531F7AAC9B4400C3C6E9ED2FF0B60F2972C79553CD09293EFC17B2335AA
SHA-512:	BB951E8EEE524C84B2E939F93B96E7E4808FE3F0781F769134A2687B0D0F5C9177C26CB0DF1CB65063630A69A87A73862613B11AD61A73DB468DB56431F182B9
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/forms/qp_sprite214.svg
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="26px" height="10682px" viewBox="0 0 26 10682" preserveAspectRatio="none"><g transform="translate(0,6738)"><path fill="#5F6368" d="M11 17h2v-4h4v-2h-4V7h-2v4H7v2h4Zm1 5q-2.075 0-3.9-.788-1.825-.787-3.175-2.137-1.35-1.35-2.137-3.175Q2 14.075 2 12t.788-3.9q.787-1.825 2.137-3.175 1.35-1.35 3.175-2.138Q9.925 2 12 2t3.9.787q1.825.788 3.175 2.138 1.35 1.35 2.137 3.175Q22 9.925 22 12t-.788 3.9q-.787 1.825-2.137 3.175-1.35 1.35-3.175 2.137Q14.075 22 12 22Zm0-2q3.35 0 5.675-2.325Q20 15.35 20 12q0-3.35-2.325-5.675Q15.35 4 12 4 8.65 4 6.325 6.325 4 8.65 4 12q0 3.35 2.325 5.675Q8.65 20 12 20Zm0-8Z"

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1477
Entropy (8bit):	5.437792107168178
Encrypted:	false
SSDEEP:	24:G9vCD7OYs/dPrWq/bF/RRD7OYs/dPrPfuO4D7OYs/dPrcQtJc+u/rD7OYs/dPrru:GUOL1jWqjFZVOL1jx+OL1jBJc+u7OL1W
MD5:	3941CD60FA643ED248F99441154F151E
SHA1:	9300D366354B80085699A5CAF72F625EB706A19E
SHA-256:	0A5A52ACCFFFAFFBACC3FC4F4515ED7B73049FC088786B9B74CCAC76F490DD5B
SHA-512:	53040F13547713C2049A4CBE7248F0956A5CBF6773821A1A4ECEFAF40D1696A5FDD1EC4E6DE7638E84E99AFE8091AC376542901B3B8C29FAB6F5347C522E8F85
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Product+Sans&subset=latin,vietnamese,latin-ext,cyrillic,greek,cyrillic-ext,greek-ext"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Product Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVE9eOcEg.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Product Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVFNeOcEg.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ latin-ext */.@font-face {. font-family: 'Product Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVGdeOcEg.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 129848, version 1.0
Category:	downloaded
Size (bytes):	129848
Entropy (8bit):	7.998140890095368
Encrypted:	true
SSDEEP:	3072:5Pxah+PkeDK1M6rUtoWrUzhK3gBMNopGuvUpRx1sH:1gh+EM6omeWhKvNop9yRx16
MD5:	07987CC4A39B31CF6AFFFDE675F1D849
SHA1:	7ADA46987D0E1AAE2D3288272F8C97AABA4792E5
SHA-256:	DAE2E505F61E23A088E4FB91523643D2E0B816F29DB2BD57AFB3F56F00D080F3
SHA-512:	7AACFB569ADCA23716E0E3CA1D81073126DAFCAEFC33F4F43261A60F3F30BDF6FE0F1303BC8F038A2E55C574F6B59EBA85E7997F2A457B7E8D42D9ECA798FFEB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ebgaramond/v30/SlGFmQSNjdsmc35JDF1K5GRwUjcdlttVFm-rI7dbR49_.woff2
Preview:	wOF2.......8.........................................8....`?STAT@.........\|.....P..6.$..L. ..v...n..[S...Sd{.....n.i.ID.D4..C.w..(I....1.`...\O]G.Z....z..I@.m.....1...........[X..n..&..W....4A...w.+..0..N.>...d!..;..^v\|S..z}..`(..h,.p.SN.(...1.q..5..sx8....X.r.C.!V.j......m..9....Q5&>..j#hZ.Z.1.i.I2.{..>....S'Q...h'..f:S./)....Onx.#b.....0g.....0.`(...X....x..%'........s.F...........pp.]/.PU!4..A\|/.t7a,.\|b..^b ?.]......J.x}.............)o........2...,o..0q.T...>q..y0..f.f.0.`.m..dCC.6A.{.;...bI....5..q.....-&.4.....7.8.4..q....4..is..q.1.z}...[....&......L...'..EP......B.^...~:.d.....vw7k....J....U.).4.F%\..0.......{..<.7.]..\|....2.Ko.<.}.g...".^..{.=...y......U?.?.(c.wX ...J..J..%...(p..3g.e'.^.!d.\aU......C..t.}...T.o.......X..0..Q.......li.R..E-.....f..e....:(...?@........>v.K. 7.]'.Z..5cV.k.#.<48......nXx.....w...bS">....../[.g..p.I..?UR5..k<.wc..G.2.......^..'3...E....fDU..;.f..-....S..?/...1.....T....kM4.......>g.L3..CT[.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 47364, version 1.0
Category:	downloaded
Size (bytes):	47364
Entropy (8bit):	7.9944232758512355
Encrypted:	true
SSDEEP:	768:JXGmLkG8r2AzLYjh8URHJeHx85z4+Qn3BofJVBDwt6M//67Yxb3ds:AqkZ2AYzcxU41nRofJVBa66/6mbNs
MD5:	FCC676E93787A8D472AD00BF7F158D88
SHA1:	A28C8050BAA6E17C6ADEC60BCA582715403D500B
SHA-256:	1F6B8D8F7D462DC42D48B29E68062A707890AA2DD700C947806949F63D79694A
SHA-512:	887F1B666623249B995BF78562F87410D295619967C5146DBB5EFA01D6FA7C135D51D68F6A4C0A80A5B1EE1C0734713F6CA03605D2104BBA3AB991BC202AD3E6
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787z5vCJD.woff2
Preview:	wOF2...............$..................................f..l.`?STATD........D..K..t..6.$..d. ..P.....["...q.......d..s..?......<.Vv.j....S,a7..t..%j^......M.....m7.D.)C.o..7..)4.yF..mW.&v..Y..#s...1j.!..TG.{&O....P....-......Fq...D.......SQ.:^.P..P@.}...L..B...1!BN.<.....0_K....).U....}6..i.....eU.\3...WQ(c...m.Z.&.h.a.%.R......E..E.T2.T.&\|.uu..6m....R}t......]......x..8....}.....Kl..W]....<Y.....W&..]...w......^tU......s...S.g}......w.b........N11rQ.Q[cms.j..2u.....Jrf..%i......M.F.....S......bD`......t.h.l.....Z....@....d....9s.u!#)..hSa.X.....DVl...\|.....8.1N.fj...@........w.7.M.g.....0...7...T}.e.K..lod.y.e...P.r.j..@.%T..@....r{W..]..z........E....z.6...Vd........R0.@%rX.D.2.@.......g .....K#...\.D5.Mh.....h...p..!...=....r..8.!pv..V..X6.Lm.....H..tJ"TJ$..{h.t..I...o...Z.4.x..(...E=.H4.C$T.].x..U.w..eW40...h.........K.._.jy."..K[...K...5?.S.=..yVs.P8j....y.......%..h~g~%..(.V..(/S6..9....2...fr?V..Z.j..X..zY~...*... i,. .O.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 35060, version 1.0
Category:	downloaded
Size (bytes):	35060
Entropy (8bit):	7.9934247518702914
Encrypted:	true
SSDEEP:	768:VWgzOJq8VMlI+d620JaSUhkJN1tLmkLqnEsKeeBClx7styedpa12:dSJBVMlfd6VJaSUCv1RmkavKetUXnZ
MD5:	0360DBC6E8C09DCE9183A1FD78F3BE2E
SHA1:	6CD4B65A94707AE941D78B12F082C968CB05EC92
SHA-256:	2DB6BC36808D43FA89029C652636E206FA3E889B35ECF71814AB85F8BA944AF3
SHA-512:	93C9F1856142DA0709F807CA3E5836065E61BC8160F9281FEC9244F31ED8AE8DF500CD5C64048AC59B4DBC36EBD18BA8E7FBCEEF58134DD76441079FAE147AB9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVF9eO.woff2
Preview:	wOF2..............u$..............................T....`..P.l..a.....D..;.."......6.$..@. ..,..6...[.]q..}:P..(....W.(........(;h 8..r.o...........k..........>..eZT\K.....4l..Z]...1B.1.G.....\|..p..._..S/...^I.e..l.=.I1...0..L./..D..Y{.w....(.....Q..J....v.........z......Q/.K..f._...-..T.f...[..U.).>.K35v...n.?-thr......w.?[D.u.Q.}..i_.cp..0E.R5m.>I.......x......H."C,....2...q...E..r.?...R../.J..m..X97...E.fJ...=.Q.>..`.QXuw..e."........\^.....~....>M.....h.Q.-.......SM,;W......#..#.B.....K.o...`...z...t....".$..s....o.v...w.I.mg.$n....../...N.....8H........^.~....X.Q.,YB.U...uX.e.o.l..o.2f..^_].~.3w........J$2)_.c8...&^.>...r.29.D&.I....T".H....O.2.$..r.\...1.}.ES~5...t.X`.x.gQk..e.L.N......{.6...4..G.....2.z...V...Vy.'..../.....'...z..i.G.......`...$@.k......1.....{PH.....qf......_...A.e..7.....C.?.^.....,......NDa<b..F...:.....+..\|.._I+.2.^......l...3..^.)qJ...0.....X.....yj....J"...lo..._j...Z...0...m..2.$.EBa.....w...\|..2&!.$..!S/^'.....r.U-.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	616
Entropy (8bit):	5.009629159026319
Encrypted:	false
SSDEEP:	12:Uc11FPrZO6ZRoT6pHAcF3a8xRjzrZ6ZmOHc9n+5cMK00k14enEPCedG:3FtOYsKB3xxzYmOOk4TfenEPCD
MD5:	1868068BDC2622CF2C4C607102970B6A
SHA1:	B254679B639C5D7F26BA8662A70E5D7587333ECD
SHA-256:	354AA87B02FCDDFAFEE3DB7BA65775E92D271256B7CE8DF3C0BB43467EBA7B3F
SHA-512:	A6C2CB698F7CA900EB1132C876CA70A5933EA4F201F4C6621C8F357A3DD916C8F9A834631C38436BAF83137903704D349917D9EA25B179AEE90262769F44A85F
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/icon?family=Material+Icons+Extended
Preview:	/* fallback */.@font-face {. font-family: 'Material Icons Extended';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialiconsextended/v151/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvJ.woff2) format('woff2');.}...material-icons-extended {. font-family: 'Material Icons Extended';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 53884, version 1.0
Category:	downloaded
Size (bytes):	53884
Entropy (8bit):	7.995657719654049
Encrypted:	true
SSDEEP:	1536:e2ESZvfEEuCnkbGrXul6qhJi7nvl3xM3WxNXfA:e2ESZvfE1CkGald8rlhMmxZA
MD5:	11E65682C5D363ECD17CDD1CE3615418
SHA1:	89CC3F37B6EBE724BC22045AEA74EF2BC6932DA1
SHA-256:	41A98AC11A50E26C91A33CD44D8FF75B7F5963B33CB63AF48099EA48D0BF5E9A
SHA-512:	6E6FDA35E1356D13C0B936C815B9ECEDE941DAF4B853ABDD721C2737B80A6155DB47BF908615374C0FBDBDB8E75DE69D18776BB4C051774DB06BDF2F5A5DF29D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu52xK.woff2
Preview:	wOF2.......\|.......D..............................j...j..j.`....R..<.....d.....Z...x.6.$..0. .... ..D[..q...WF2n.....e..T.6.e...n......m:B..p[........,.P.....4"J..,M.u....!Z..(...1gh..E.N...[.-$.R..a..g]b.\|Lw.bp...(....r.:K4..w.L!.c..$.m..#.E~...2w...^n....{.A.^]..B......j.e....u..._(6)T.h....i7t7q`.).=....:K.bA.r..T.T{g.U...:!a.2..B\........Re..a.y...TC3.....3..2?.o.._B.._E..6yE.+>...$.[..!I.....E...0W9e.$...$.l.:.n...P:b/.<C.....ynr..D..,..Q(PU;U...n..U.........o%.....ZP.6j....&..a...O.....0...0.H3.P....m.3...J..8...."..H.Z..u.......P.Tl.[K....k..$..?'..ok.I...w...@#...[.>o.wWCu.#.7o>.....p?.e.K........I.?....jD{..r......X.Sg..L.....Q ..Q.S1.0z...9.>sk.}.y.^.S=.=.T.q.Z.YE.O... $.... Z[....>L!(X..N...,..@c...&s..S5.[....Fm.b.S.6....@...dRm.N.s!..}.b.f.=.OI....rJo.....DMu..l.M..YU.L..5.:....f.q.c..Y{.TV.ez.HeX<....Y.....]."F.M..h......MV...u.?.&.....IJ+.....;.v......CF\|.6.Z...L(.3~....&. .G....Y.!......'..L...]9u..s.F........!.qC......{Q/cw.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 4280, version 1.0
Category:	downloaded
Size (bytes):	4280
Entropy (8bit):	7.938204175548688
Encrypted:	false
SSDEEP:	96:Tt2MC9hRyCoDgukpdZAfYeNXx6EU+jtckAh/G44MBUAgcD/o:u9v6g9ZAfYeRUutckAh/G44MBUAB8
MD5:	35F2221688A86314A271F11BBF8E76BD
SHA1:	2E56E5FCCE211EEA8CA3709E0A8B33DD89CEDA92
SHA-256:	3C1D1B09AF9EA0E4A497CF8F1BAAF915BB032ECA2AE369869566282D156CB25D
SHA-512:	188B20E8E1D6C3759B5427A6EA56AB9AD509DDC7A8F6480B6C8E55CD742E26E15D5804B0B518D62226361DDA70AB02C5B2D302D7259F7D521617DC245F2D52FB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9eIOpYQ.woff2
Preview:	wOF2.............. h...Y.........................2..f..j.`?STAT..l....x.d.0..6.$.Z. ..~..G.....#......>...L..Y=.......h..mv..t..z........}...If....?7.I........2.....C....fR."O....~.{.-..R...E.n.&c0d.]S...m.4.f..\.Z.]....5....KA?.&(8...:r...........z&..\|...mk.&.H..H.T.x9./.'50........0..(\...1;.4o.v....W.$$.0..TY.B..V.Y.j...!....r....V...e...~.1..,.....J1..`K}......`. ....P 6Cj...e.f......U..... ..P.;...5W.....2PS@X.+.1k&..88>9..H.H.o./.W.a..F...~.._..t.{../.(...7.......5...5Z.\.T$.:...'.!.=.=.DJ.........F..1....@6.?>..;;.....L..s..A.wq..B..:2....+9...KT..Dt.a.+/...v..P......v[h.j$.rA.d@TB..B.&.)!.I.n.w.._t.w!...[.&.N..a....HL.z.Y.....t.F<0..`....2i..L"....+<.h$....... p...).i..+!..5...+=j..=h..mm.,....o~.u6.Iy.5SQ.....e<..aI....n..&..[..s@.Z.......-.l..J6...=.'>.9..8.&............;n..#.1..8....L.......A.3.....z8L.A.>...c,....z....k.*&.$;.;.QSkA..m...!4. .@V Q...eX..... hh..b..H....?...k.Yf.......;(..(.`/@....9.I@.2.....Q......i^.[I.wa...D..

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 105776, version 1.0
Category:	downloaded
Size (bytes):	105776
Entropy (8bit):	7.997698577634301
Encrypted:	true
SSDEEP:	1536:97gkIV3kNCPB6vwmOqaGQKpLEM93CVA0l5p/BGrNITrG3pI+fl5N5D10:97gX3JPBVmOq+x1BGr2KZI+vN5D10
MD5:	DF1878BEEF6F76B3B8B9C3A479BFA5CB
SHA1:	5724CF8D410C6BD487A002A14386231C29C933C6
SHA-256:	C7B73DC2A43D6620B4AE7B1E05EEA2342CF309352B4DCAADEB4491C5B72468E5
SHA-512:	C5B1B9312EF7111D95C07C863E19EF731155109AA5FDB451ECE9B509884146CEEBDA3B314F42A917230F81823FF8ABC89A70BF9719DCBA34BF327C2678A1C544
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjRV6SIc.woff2
Preview:	wOF2.......0.......T..............................<...X..2.`?STAT..P........Q.....6.$.... ..f.....[..r.fW.qt'..Z...E.Ds.~.........[..k.G.VR.I.......$...-<...........9.{..........EY.J.[MhHo=jkJuS..'...#...Q..-.dQ#,.aN...`E>},.N..n.%ShTI.T..SP...6.7SI.....K.E..6..J3.Bp.I..\|.c....&<.eM.......z..W/.V..%.GJ..%lOQD...Cq..e...p`C....z.~..n6%......\|/N(..,_....J.F.C.#C~..._e........3...[`(..@....2-[.q..\|........./...:....#Z.(..P..P.F...0jVnb..;...t...m.....`.....$F..@D...#...2..H.....%HJ..6"_.D.0Ds.m.5.5..Z]....F.....,"..H..#.1.....!.qO?3{d.......Jw%P.>..........s.o3.f.x.t...4.+fyLB...p.\|.]..++..gv ..t`...&s.C@=ID.Vcm..^..... .,Aw`.4.N....]...p...#.1.ak.R[H....{e...\|?'.........!.D....Be?...zEEA1...$:......?..ni.\.6..6qFg..Y..}>a0.~.F.PK...j....%.W.>.R...W.?.e.VrE#..[ ...H.U.l9.l).....Q........['....r.......w.n#.,sR.!Tbi......_..l.J...7....Hc..........@;..t.T.Zu.Z...b..^.?T.T.....4...#@&....L.n.A....=x.........}..]....3.0I.L...=..)......*Z..j,...."...

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 42296, version 1.0
Category:	downloaded
Size (bytes):	42296
Entropy (8bit):	7.993503490899671
Encrypted:	true
SSDEEP:	768:IS4cNuQDLlcxmEyKRCyplk50W1AcLgmYVii3ZAv6MwHZtFqXeqRstTBVredGm+IX:IS/UQDqvyQq5j1AckQiaCMeXFtTH2SiV
MD5:	20A5ED564FE91199A53645DD2A8F8BCE
SHA1:	878AB8E8E2A0BBDE4F47359D625DB2B81F7AC0A1
SHA-256:	3109801208D4C4B75FF98BB721D0AEE286293C2F0D2F47F778DCFAD779E9F5EE
SHA-512:	A4195F0BAE426F2886058FC84630D3D6DAA855D8AE86FDD558858D19A2F2EBD0BA4515826827BAB85225D36CA53DCBBB8AFAE88F100B5793F70F1CE4B3E3C6A5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvUDV.woff2
Preview:	wOF2.......8.......(..............................X......,.`?STATH..t.....`.....j..6.$..P. ..x..U..[..AU...W....`@......h...7~......:.&.v.[a......R.............d...;...].!...A...Z...BdnQ.$E.E.$.T.&..0...{.......L.km..1...1^MK........Q.$So....9.^_M.Ky......V-..N.tN;D..Qy.D.h.&......Ew........N7.2.K...p.:{..O.F.#...1d5...9..4...2.0Gt"l...^=.=x.RY...t=......8.u&...T...ePT>..3..k..Y-B....:.M..C..p..t._..Q......^.L........{9..n...WW...._.C.vm.X.;z.....,.:Q.`....q......O.+ .5dp"<.y..,.:..rp.@.r.z({.Y.R..d.......[.....w?.Q":(..@.........;..m......A..r{.rQU...<...,.'.j.S.}..s.n6U..Kt..S{i.yVI^d..(...Gi.M..R.N......sQ.J.Vh....]...B.%.......3 ...B\|.......#......}]..M..G...#.I>....s.s...6..c..'...%-,..;>..P.haDMP.+"....b...rT.h.8...yg%....<c..}.xrm...IT...T.d..yH...Oco.........4...I%.6.HSK.-5."C.@1.b2lc...e.:&l.........=Tl........F!&[...bm.M........@E.,.<+.....X!$WV2....L..B.u"....dc.>.Z).@..YJdp..+7R.@....Q.P..P....@..SW.9M..i.......~......yC.*$.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1420, version 1.0
Category:	downloaded
Size (bytes):	1420
Entropy (8bit):	7.723110473429003
Encrypted:	false
SSDEEP:	24:PIOJL9JTXY3oLB09sXzsG2PGl589W5VCBMSVtR+dSGwf6UJ93ciyuJL:PIOJLTXeMK2s1el5b5VLKtR+8zfxZci3
MD5:	F8FB2BDE26ED2B7A60BA773D42DD2150
SHA1:	70871B9E74126289901A00F44B8271849A125DBD
SHA-256:	9DAA921A21820750F7FE6223AC35072394F99209C374409981F6EFD1B2E3DCD5
SHA-512:	B397932A81E81F76E31E85731A92CF468EE523E89313DA0D78A1513F7CD48C8D5BAAC83C3E02BACBEE45C9CBFDDE8D69BE0D1B6DC584C67624DAC1F027942CE1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuxJHkq0.woff2
Preview:	wOF2...............`...1............................F...`?STATH.d....D.m....6.$.$. ..h.H..._.(.....5.$a..3.\|...7......B.7.BT.4...5..:D.k6......4.G....D...8.3.W..+..e",f!.(.RL..K4.$..B.TB{.2b!1d.I...[.9...;..j..F8!...... .......H419...O.....0....@...].. \V..1...$..)&..0<.....x.......Ls.\|.......$.1...%`@..."..i6...;.\...]...$.!.. -..Q..T.?.....h.'?.........l$.<0...{........(.4....-..R...A.$.oK...@.0.(!d4.#.@.0...B..\...~=N&.nj{.5......MjBq.......S2..@..7....e......J.....<..Rj.......J......u.5.)...mr.K6-.iQ\[8y2...{......ft....e...O.2.QZ.N..f`.....D...g..+K.]"..S..l?..^$...]J".sw./<l6a.t......s.....:.y.Z..;.x....R.1...d`......y..:..oi...Iv.\|[..../.G..4.i..J'..v..?.-.M^..\i...n.".d.I.L..9xt....R.%K........>}}^..";.C.'\|.n.j..L......[...b..m..j}U.'...w..XI..,...G....{X...!3o...j.R..q.w.bO99...Zm..c.J.'Q9.....i......mJ..aG.....'Jd.:.J..S.mXaN)jV..7gk..q..s....T.....5.B....{c...9q...............Q.5.. /..!.........h...$..'..>.......X..0.cbm..f.'......8..R

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 49980, version 1.0
Category:	downloaded
Size (bytes):	49980
Entropy (8bit):	7.996799215294005
Encrypted:	true
SSDEEP:	768:4NDq0SoQR6dpJ1vmaM6qe0DxytWLtO20RlJ0G9dPPlBeeeWsx9HiKdfbZ2g3A:SoR6d/BmaFq/LEPiM3+HPx9CKqwA
MD5:	7B69C53249D749F80F5AC911A9F6A416
SHA1:	D6283C043883942BFB577D0F7F2477DB7C7B10B2
SHA-256:	AF6B37D5CEC7927D3BDFBCD8C75D7BF80C29C583D71B75ADE321EF706A10BE32
SHA-512:	F191626E8DF898011470510827C91750C64463BB7A739243A4AF205E0AE76F8EEB98C9BBD4C2B46484864F35BBF318E748EF6D1DBEBD71A3D9E5EA8C585787CA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlvBg.woff2
Preview:	wOF2.......<......................................j...L..j.`....H..<........4..Z...x.6.$..0. ..~. ..)[....d.z..WP.!@.g..L~.jds...nCj3.I...........)....oH&qX..I..`][mO..A...D...#.9.Y..."BxD0..u."..$w.}.B......=.O$....<.p_cBd...xn.9h/.d..a....3:d....S}......M1....... ...03PP'W7.$%...,K.<.l]OAT...H.T.Y.m...V.&......>...\|`\|.f..._G.?._. .#p......L.N.fg.C&...;..s.1D.5....<:...9../F..#..x.o..v.F...l.....)Ie.~...w.+..1..QY.?.x..BT.L-..c..z'\|`.;D-H.E..h..K.b..}j.....<.8......C.$U.7..j.XX"....D.P.Y..........F...%#t..rD....@...FR....%T...`.~Q..H.J.E1.z..r6Q:.... ^.......}.5...6y[...0ID.&..5DB.R..m.h...u........m.Z..VP..BW....Ku.].(.........B....N.`.....gr.=.\..E..$.S.>.xmP........... .....9......p!.GtC;..a.zF\.....;.^i\T..7k...[.M)..........X.p..k.}.CT.T.*.....=h..7@..].....{..aa&2.g..pO..p3..Y.AV8X1....T....L..<.....@..9..1..k...k.....h...b^...^.0=..b"z.c.bi6.T.....L5:...s:n.)...Q.IG..'...#..yM..ey....V.......@zk............h.].7......^d.Q.X...n..`

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15447
Entropy (8bit):	1.7278338539839808
Encrypted:	false
SSDEEP:	48:b/68u+k29W8sEvlxN+Y9Ml6BCj1L81/L8C+sc5IY7J9FPm:bSGkEWRQxNXesc5lFe
MD5:	8DF19EC399BE913884590015105AA584
SHA1:	5502576575AFF37A626934FA655C124291C58AD6
SHA-256:	D48A0F5A08249E1768C06ACA31C16D50D1216434E1C91BA322CF5521577A59E3
SHA-512:	89D09ED10A4E440A423443586F111E247C3BFB1BE58AEFC3E62586354EF21F0CCF66619F54F6BC06CD81DD81C57B60DFB3D052C37AE8DC0E972963B67B3380C0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....pHYs...............;.iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <xmp:CreatorTool>Adobe Photoshop CC 2015 (Macintosh)</xmp:CreatorTool>. <xmp:CreateDate>2015-08-12T10:01:56-04:00</xmp:CreateDate>. <xmp:ModifyDate>2015-08-18T09:59:41-04:00</xmp:ModifyDate>. <xmp

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 44980, version 1.0
Category:	downloaded
Size (bytes):	44980
Entropy (8bit):	7.994798586860677
Encrypted:	true
SSDEEP:	768:bsAmH++kJwbmKlSq79G/siQusuXt6zp9tDWW8jVMbfIvTvrqk+61+hpd5USy/EF1:bsr++mwJlSq790lQLud6zp9tt8jVMcvm
MD5:	A32CAE41AA72AD6CA75FF8B5A7A11606
SHA1:	FC29CA3935D5F85C169448D7CC6410C2560D92BC
SHA-256:	33EA7445E374A6AAB69F4E13DDBC9FC0E356C731E2D1F093619B93D4281BBE2E
SHA-512:	CC5EA4383668E7E20CCC76EF91551C967371781BB7A09947B7B2C55916A9282219A15AB11D747D9774D91C51DC2E379E7CC8D25C8CFDAEFFB1E4B4224F486228
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXK3I6Li01BKofIMPyPbj8d7IEAGXNirXA3jw.woff2
Preview:	wOF2...................N..........................$...x..4.`?STATD.......P..V..6..6.$..^. ........[......./...H.!..VK..m.`n-..6.l/ ...N.v..../_...........](.IZ.....S....=.&..MH.NsP[.-H\|.c.y.....6.N....U.....Y\|n......~Tz..S.uK..vG"....F.........F)^.7S.;=d.....c<.s....b...m.4X.T.l.....Uf..{......;......O,....~...x#a.=..f...4...s.3.R$.)sg..2;m.I......G@.@PP...3.!u..de@.La}.....nJ.H....F.N...3j..S...~...z`..JtS...+..:....h.......^LR.0.^R..o..ODI,..$G....M...G.!.n?o.Y,..B....u$.q%$_X$..$.t..._....h..ulK..q.>w...^w..&\..NU..CR.gI$.E'6F .?`w.N.l..o..\|....{.{.r..F."V`,.....u........7]..E...\|......J.4.&m#"m..MSOR7Z....>...cl01L..6&.l...@@B.I....[.uz.....vM.ejY.es...4.l...n....,.....2.*..@..UZy.p..i?..o.-.n......s.?..t.............D>P1jS.....q9Tu..zD......:....f.8. ...d..,X.E^.%....}......L.x.L.I$.b........'l.(L...)..I.c.p=.....+61&l.}qEe...p.....x.c...a[..j1../`...N.!..O!....7E;P.~..-x(...D%^+h.xH4J.y..wO/u..`.2Y2..%.so.Y.y+x.w..d...qkk.De..`.$..7...

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 54212, version 1.0
Category:	downloaded
Size (bytes):	54212
Entropy (8bit):	7.996118207813738
Encrypted:	true
SSDEEP:	1536:8sEB4tJYg9vMHihmW3kiesSO/Iy/EEbOPK:8sE0JSCsWZesSaIsnOS
MD5:	DFA374BE8A198433A11856E9967E96F9
SHA1:	9E8D11BA6270CCB1254686C0F24A05F21D33A661
SHA-256:	0BC130FEA6C21498BF358680BE297533AF347EBCDBC18576629FF1D89F8638F7
SHA-512:	C18730EE5A9E1BC97E441726D74FEA87222F9AC0CDA4B02C7EAAA97A4F1319BBBBB7B5257037AB3687AB8345FD1E73F933005875A538087A84EE447F2F103E8B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBhc4.woff2
Preview:	wOF2...................^..........................j...L..j.`....J..<.....@..Y..Z...x.6.$..0. ..&. ...[..q....iX.e.....ySkC...........1....I..(....~R..r.v......U.\"9<..(CT.Y..2R.>%<U..a...w..1.K.B..w....}....dJ..n..OI.)..9"2.i0w.N.w~....&...A.U<$(.%.I..#HX"....;>7s-.v^0.1 ..."......#./...K\7.s..dJ.d..q.p..tq.\|....E........'.3.n.2.lw..&....^8.)3.B.q_...HUV.h]v.....~. ..2..[.F..+O.$...~un.......+n........s.{......"...Ed..C.0.R.....`Tl.Fm......?.....#Z....'.#G.........0..F...........`...].'^................2~.~...........=r..=......O.........,..RZPB@T.(.6(..X.........{_.C&$.e,..$.e1.....8..xg.....\|,/.].......`)....4....w+..h...?..........5.F?.....V.b...../...?.r...w..J....LZ..!..Y$.a^~s.B.^..Hi&..&....6...D.{;UY'..(5I..,U. .`.n..."..F..d.+.....o.`vX.y../........w.6..%..B.1....Z~...g.{zb....M.1 ;+QW.B...O.....;.e...3.j......ts*..AjA...r..1.,..G. s.t.95{w<..}.........=3.4..f..>.8.I..$..g.9..>...r..B...% ....4...%x.h].2......!.m[......

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 72896, version 1.0
Category:	downloaded
Size (bytes):	72896
Entropy (8bit):	7.99302309612498
Encrypted:	true
SSDEEP:	1536:l+/lJ4+lxFkpiySl5jIWJ2wLyusIoQh8TKiZeWwn483A16TMVo0MVuJ:SJ4+DFAPSDjb2wLuIOkRn483APDSy
MD5:	8AFBBEF49E32F6382F8C029DDA485679
SHA1:	2FBD600C537D820F23D492D907DAC0BD98F0778E
SHA-256:	D4C4F413055D77B989E4D3BCE7E3CBB45427F251387EABFF8F9709F4EE1B2BF0
SHA-512:	A18299FDA6BDDE29D6036FADE0A234205D8BAA352BC15BB4AA846730D367EEA737DBB625D65FC49414906B2431290C14AB79A1C36241A206FABF80CECE385D29
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotoserif/v15/R71XjywflP6FLr3gZx7K8UyEVQnyR1E7VN-f51xYuGCQepOvB0KLc2v0wKKB0Q4MSZxyqf2CgAchbDJ69BcVZxkDg-JuqON8AA.woff2
Preview:	wOF2..............e(...\.................................4.`?STAT....P..............6.$.... ..x..g..[...e..c....Vl#Q.....hsH.-3......7:.............].....u.....................%?"7......^.C.....A..jbl)...M..S>D.8.b...gl%g.Z.&\MHZW..{.p.....Yi5..&....[.LI..ye.j...W.0.p...xR..!E....k.8...Y...+....[...!ye...o#.>....'.T..s.a4.[Lk.k!......d..p.i....k....lF..5~Z..zJ..X.T..lB.1...(X..Uf.k...\|K1:..6....a...3W......;SvG.J.@!./..^....v.'N.sB...7..o...a6q.x@k..Z.E-!W..n.K.m'......eu1 7..lG".3......+.A.\.]r..wp.\.\.... 3..V!.x.BP.-+M..BR.N....^F..h.{..uas....0.....Xr...x...=.C....c.A..<.#...#d.w...<.d........ .G5\m..0RNqivB.xwD...>2s.E.].u....3.....P..`...-..pJ...$Fg...+.1.L;[..s...6.(.Y.+!f..}d..DDh.].3yMPN#3.}.p....P.8].g..-5OI...'..Il]i.D..oR.g+.+t..G..32..3O...../..I ..bk........(.\.O.....1..c.....Io....e....W...*.I.AG...r:.E.4.......M>.[....!.._.?:$......'.oS...Fw.-...L..J,.z.(......}k.l9._&./d5.l...Vm.z...=...~..D.I......r9..k.6..b...

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 65828, version 1.0
Category:	downloaded
Size (bytes):	65828
Entropy (8bit):	7.994888729247966
Encrypted:	true
SSDEEP:	1536:jpUCPU80z/viwxp2ws/6HBRhRhKT7/wu7QlakYDFc2kN4B265:jpUcZQfx8w9hRhzKTJQXYDnHr5
MD5:	9187B9AF4CD2B2C0080F3E41671E52CF
SHA1:	50810C3D6D3F3AC2155409DEC18086ABC3E17E9C
SHA-256:	DDD58F9FE28DBDF8AA84F7F39DDDDEBB4CBFE5B0C74470ED72C7624C7742CC30
SHA-512:	B2AAAFEE669B48C2E66F3BC010CA7FBEE9B2E9B17B11B9BA619412777DBCC35B37F8F098F0F6001428877FB72B0072F451F51577E98D15FC9B00292DAAEA3541
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotoserif/v15/R71XjywflP6FLr3gZx7K8UyEVQnyR1E7VN-f51xYuGCQepOvB0KLc2v0wKKB0Q4MSZxyqf2CgAchbDJ69BcVZxkDg-JuT-R8AA.woff2
Preview:	wOF2.......$......b...................................b..4.`?STAT....P.....d..o.....6.$.... ..N..g..[ ...7..<Hm.f.. ..}=p..!v....m..... ....t.1.R@..\S..kq...xN.%................6.y.g......H8...Z....BH......J.2.R.V.v'l..q+.TI).e.lFmA(..$...-..t.sZ02P.LJP.~)+.z.F....L.M@...fC..\|'..i..!(6.....d.2n.Q..YR.9.....#wQ..2.][.,i......\.<I..s.o.Q[....Z.....\|......../....=...R.[.1..X...L.Gj.Q..........'IBS....;.%u..T;.gh.y..d..2...7....yV.8..}Sty).\^........IX......p. .=.ze...F.8x..bC..h.Yg4...%......h.\|..{`p.....~vx..!..p.v.....t.tB->j.Br.?.Y.. O.s...X....s0.g...].=.Ru.".rR....z......\Z.N.y_...P...h.CMj!.z~y...?..i}...S..ft}u..N...x......0.l....Fz8U._..;42..bs.....+.zG]..[.Ot....wE..\..,v....GK..$}...sT..Eh...?U;."..f....x.:.i..NC1..._...P.\|X.2.%.,....{3.51..*J9.W..}.z..RL.(t.P..2........M._.....+..u.X....(e.v&aI.v......J}....$..O..U..:4I}.h.S`0.....ZY...q.g\|)X...!....VM.K.#..K.!...B+!..D...6@^.Q...E..6z....X.`..D;""....D...$..q...{.y......ui^-...

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 58012, version 1.0
Category:	downloaded
Size (bytes):	58012
Entropy (8bit):	7.997002014875398
Encrypted:	true
SSDEEP:	1536:v/rygnjckWB1Xbc33Q1k8BHGEUrn/ydR5V1H27zpYkf0N+:3uUjckQOnQ28xGpKddo/SksN+
MD5:	E88455150169496390368F9DCFC709C6
SHA1:	672607F20C14829A1071441C031A8411196CFEA8
SHA-256:	133BB5C5AF6B43D96660FF65F46464F2A03F7D0DEEB8E2A1F8E0AA7CE6770120
SHA-512:	D9FCD7B9C17DFC2DC256E9537FBD0F653C706FD063859602FFD0229768FA1AF6A5B1D723F7A91AD1EEDD0021C21AEE0FBF894933E352ECF3F4D7B0EF655A273F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/merriweather/v30/u-4l0qyriQwlOrhSvowK_l5-eR71Wsf6.woff2
Preview:	wOF2............. P...6..........................b..X..T.`..(.....m.....l..N.....6.$..p. .....p..1[.....;..z.o?@\V.7.O....).i...m...`<M].4.....I2.....m{...P.4.....Na"........6..Y.4..;C. ....<.!8..}R...i.2..UR%UR%S..uc..b.1....U2.=....F...w.....y..%.....t?@..8\..Y.....F+`..H7...%N.().J2...(..5..w[z..0..C..W.....:..V.v...k..M...%......}.>..._.{....^T.h..\|..#.Z.......?d.m....J..+N.<=..........@......_&k.O.....P.FE...aDN.02.n.3j..#.U.....W.:......>..$......d..s..~.~w{.I%j.%1r....0..Q.k.../.{.......~...w,~........1.S..$.$..T..T@..Q.~...O....!.YB!..h..L..........9......)>.X....PMm....p...i.;....tP..&.O..v....61?..y...sfI:.$`.A.(....._.....]....{.;o-.H$....d.......:M$....m6.a.K%......}h..XND..t...s.O..."F.$.-.....Vf...d.:...R..t..(.<..{.{..J..O.X.7<.taU\|.~.=..1.8..+&.w......4L$...B.f6'.k^..6....N\.F.4.2...$..U~......1. .m..EBr...D...>y...1... .t.'..jX..\j).2...n...i.....\M....X.j..0.u..`..@......g......._$.*l...B..[W...#.....R.....?...J..H.?......g.Y

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 1360, version 1.0
Category:	downloaded
Size (bytes):	1360
Entropy (8bit):	7.749168790064011
Encrypted:	false
SSDEEP:	24:yUaKOlSf0ba+BV1iyDz2R+Z5d94VAHTTdjeIx1P0iN0nYr+MN:3aKOlSfwVZ2R+/r4K14cN
MD5:	248816E2428823AA2BA6B223B82EC73B
SHA1:	EC8DD868A619356C0E30606ECA110A239CA0D83D
SHA-256:	4524691B7547D0D9F1A34FF172D940BEDAFD7725A14A5BD1121807B7D993BFFA
SHA-512:	DC940B38C218C34AC32B45144B07CADEE60E1AAE7C90F0E657CABD24C09DEC0E43E9B450F9DE107E5A78C2321F115752F8A741362E37FE7099DBA2830BB2E002
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUBiZQ.woff2
Preview:	wOF2.......P.....................................0..j.(.`?STAT..t......z....6.$... ..D.S.....(.....(.F5Fe.....bS.!.}.^.\|...w...........d....(.Tj~^.z..........]4..NR%....>....9Ym...QF..q`\&E...#.9......v....5..X.."...d...H..h...6.GR...h@....F......$"...d...+.....H....@.@`.a.B..u.x.J....j...........uD.`$hL.JXp.......0. .lt. ._.;../L.;.6..4.X....1h,j:1fr...f...r.,P.8...Vd......+nY...4.17....j.`..P.. .. .. .....M.(.....h9.......... T...P......7$..$...k...F.....Hs....\|..@..%H*@, ....^)...q..`.8m./.........98f...M.c:.7S...c...`.w...B....>.&.c.V..{.!...c...x...82`.t.Z......3....y., .".s...Wj{...[.n....<d...cc(ob.I.YB........E.{t{........8X.....1....m=.c.z.`!.+.f....e..>5..Ha.9..<.I.........-.`.{..#c..ur.......r..[.z...TM.}......&'..'...o.{.....=.JY..l.u.lO..BcG[K..}.......c.....w..S.G..pG....j.Vr....$...".M..0..U\|.hVX.+S.{..oV.g...m.m......Q.kKF_.......he[O.l..g...".......$....=_..@...}.S.....-..!...o.....j...OK...`?..'..p.._.H....B.B.<7..

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31456, version 1.0
Category:	downloaded
Size (bytes):	31456
Entropy (8bit):	7.993355498241683
Encrypted:	true
SSDEEP:	768:5bx84QeXTL1ovgoUiK31+lssZfEHQ6EXEjJkEbyt5r:84QITL1onl8OsOfSJEXEjmx
MD5:	8787E52101C989DEA9FEA21E232FA45B
SHA1:	F112710595BAA904A62B68C2066DD34D7103E1E8
SHA-256:	D5C4965A6E9C89DEE7D1389167C821976BFBF55D80E7DCDDFBCB5400B1AE01C9
SHA-512:	CFCB461162FEED6F093440F8569689B5BA34A0BEDCB10A12A5AF2E470A7071EF0A587331AA920828F8E78792D8E5BF43663540887C247D7F1AB8A14CAA18E2E3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvgUQ.woff2
Preview:	wOF2......z.......R...z{..........................F......6.`?STAT...X.....(.....H..6.$.... ..D../..[.+...c........Yo..w..t.x/....A;4.....`#eM.....v..c.w....V..).RD..ZK7NU..r^..bji..uke.Fk.p......LB..8.....d.OB...........[.$$!.u..f.......6.&0......r.B.u.-..q.../X...7...`?8..$.....#=Iv.+......L.]la.>.s...5@..p..g.....tk.......V....z..BG..`.8..~..........p.......B....}lp....d.z-....}w..\...$........)..u.&.U..U..........}.{$..d......'.Jg...B.....EpQI...'.....?.C.<Q'.DI^8U? .)........-^....Vi.%. <..k.) G..w.Eq]\...W..J...a.b....,.Z......p..B.Fm...F<~vN.K.Aw.?...s.}6dC.t.`..l.~l..."..-m...nY....i....i...$...[...g......@....],?.s.w.._.HE...L.A.6.6f.....F...U.....h...?x......8.....:3...{.SYIBW.].a%..P<;.Tu.~L..4k.dkM....p..J.......v; ...a.ics.?...,~Bmn...te..?....O\|.2..#^.......8....\3.O......&...B......\f......U6.W.=.-.7...?....3...5....#...QU...W?.d.8V:n..\..tl...0.w.t[....<].FQdKR..\.).....%$qj.o....%..# Y)..cK....\...w.........(..}"@J

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 42132, version 1.0
Category:	downloaded
Size (bytes):	42132
Entropy (8bit):	7.995169768536831
Encrypted:	true
SSDEEP:	768:mZTig+Kv+tyCkYAb9D1BDH1xIE12gWo4kXJ6xUCjOtEsllZ5ql3/a0YM3jUVgQwE:6ToKWwC9AnxH1+E12gbExUr0PdzLcQUn
MD5:	2661BDA6D2BA62A920BE11952BB94849
SHA1:	7C1EE90488041D444D2289AE42C06D1958F34584
SHA-256:	ADD6DDD7FEE32D58EBA385983AB7DCC9657AD97CDBD4BF4594DB38675847EDB4
SHA-512:	D89115D310603052FF8E9C10F23322F64C74A6E4588F719E37A9368969122752357BB1BD3F45136D34AABE6DCEE717B462684A2D861931635B63AA876AED0719
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/nunito/v26/XRXI3I6Li01BKofiOc5wtlZ2di8HDLshRTY.woff2
Preview:	wOF2..................0..........................$...r..4.`?STATH..........Q..6..6.$..^. ........[...E.2v_.0.%.......-g..`.)..Wz.0.p.;.L7w".C...}........H&2f...i.B.(.s8....\.M..\..)kW.......z].L\.-....."q..pvGW.F..+0e..fv....5....H1Yu..&..U.]...fiQ.....'..3.-..X......PT....,K.5.....^.W..LB...d0...d0.Jv.%.........7.$....,QQ....".d....N.x.Z.?g..Z.LI....Q.{..D..j..M..L..<..1..CK.......4.......8....s..y?..=..D...\.M...?.U...N.7..._..dR)..VS%K./...G.M.?..[.B.s.o....I<%..hp....JD.+.z.....g..."...UX....T.J.q.B...y~n..}c...#R...B..\|,.(.`R..." .G@l...a....)..{...H...........$.:...g...(R.w......\|.}6.<.M..J....5c36uN].K...E..r.c.{;n.7k.&b.._..O.i....A.Iv.N..: ]I{.t.B.....s.tz..wYgo..eJ.ej..?.....bd.%..."...C........bc...,b.BZ'........U..........B.....#.m.....c.6JJ..Q%0Z..Zh.D.60..0....N....;,..<.....g)......9.M.RE.......ET.:..\..E....o2..4.....8...&....w..w~(...a.#.T....l........(W..f...6r..P..."......@....@....3..Sq8.J..(....u:...%3.?T<....M\

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 300, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	121417
Entropy (8bit):	7.984667979078873
Encrypted:	false
SSDEEP:	3072:+zqaVvd3d4dCSG7af90Tc48kNeaRc0pUlY2Fb2U8MtF:NgvX4d6afCTc45NtpUlY2FbRzF
MD5:	74EBF5653231DD466BFA4B6885E18DD6
SHA1:	DEE458A4AFF46025FA5F57C468E976DED5B646C6
SHA-256:	D548DC57C5443817C5981A9F29C6958CB432A4F9CF1DC334F9F46E9473ED78F9
SHA-512:	9375EA171D933A4D2F04D06F11B14D3DBB471623D66343DB6E8A2E58915397EC8FED562FA2B3A7B9C33809808B98C63D94F895A4B43AF9D36929A764D1475A4E
Malicious:	false
Reputation:	low
URL:	https://lh4.googleusercontent.com/B-vjoRYNSIlQl8HAsCemiW6akJ2yHBC4b2EoA2G3HKhmVs2CcpaqCpP35m7VNUTdetN_2n66_fMVg5s9CuDEBvQYkeP5IkOVv7IwxdcjVEC_JCG9ElXIY26bHMO1MWo2zA=w1200
Preview:	.PNG........IHDR.......,......c.b....PLTEg.....}..e~.a}.{........l..r.....Wu.u..Gg.m..]y.Rp....@`\|Ll..........p..y..j.......+.........[y.<Zt1;F...............8M`..............'-5......7+....YP>xvs...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................r....IDATx^...s.....I=)QU..].....rl..................vIr.,.I.7...L...=........H......7).M....A..i..\.rJ....ed..nSj..........W...;N.-.. 8u._j.!.<.4....7%2d9...~Z@...;.yJ)/;1uB.r.@..

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 4196, version 1.0
Category:	downloaded
Size (bytes):	4196
Entropy (8bit):	7.947790388565488
Encrypted:	false
SSDEEP:	96:XXIQbG13ziwYaI2QRncIaKuia6GpnQtzFLt4Lh2uSKafK:XXl0DVtIPuiYCKaC
MD5:	92CFF5BF3D47970DEFEF49EBF56448DB
SHA1:	163E2B870500AC648A075A008408C9FA73922953
SHA-256:	AFD7B4CE1230FC5D6CB58DAEBEED6BCD09EBEE1E4414367596BC3BB33F62444C
SHA-512:	49627E12E0B3DA7B6C5F616D3DFF3AFA24F2F7C247B46A34E6A99F0476863F071797CF265AAB2C5758CA265FFEC7E5846AE80715350795EEB40615124D2335B2
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/amaticsc/v26/TUZyzwprpvBS1izr_vOEDOSf.woff2
Preview:	wOF2.......d...........................................T.`.....$..m....X.e. ..6.$.<. ..x.W..<...3.5]O.../..!.m`_..5~.X...;c...S.#T,.5V......`u......t..#$........A...2.p..l.{b+H........p.....@....3@..%....k..[....(....l..]cv.-...m..(....=....1..=A....5E....\|..v?D...Xa...w@..J&.%k..)z.Q..8..4W..f.2H$W.h+t....$9..=..q.-; ..P.qJ..$.Ua+L..0.....'..u71..Bg.F..U. C".....!M...)V........M._s..mW.w..X.c.A....`n.....{.@..-J....B}...q.o.0..>.Q....\|.z....BBh......sIX.$av_5...J<./..;........\|h.......2.#..0F...4..b...}E..d..\......1..N]........`.0B.....?A.9...F....+I.BX.....(W....1.t.C....[.t...jo{..< H....F.+@..@.v......D.L.oD....Yr.("/M._..I...m....^...`....W.OZ.O..0.p!tQ..?.......a.1-e...Z....k.zb....j;!.&........m.-......;..,....`....3...?.!wT.{.R(.y...>.i.>..o......+.db..:b.....vj..)..\...2.&.nk.q.W..F..tM...._c)......@:.Z^..;...O..6".P.V..}x..4..b/....[.S......~4..c.^..m.....2..p..lB.K..O....>..K......C.m....M.H.Y..a1..:.0.Ki..7..(\.f*.3

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 64068, version 1.0
Category:	downloaded
Size (bytes):	64068
Entropy (8bit):	7.995942836449749
Encrypted:	true
SSDEEP:	1536:upRrvXnQdfmI5RP21QVVEIeKN8UhJhfEvCHal5j091ScR9b0XnK:u/rIdDkiVl8gfol5gnStnK
MD5:	EFD94F0EB81E50A5F75CFAC73257EFC2
SHA1:	E8C4E0A66E8BA85DE2BDACA59CBCC55CED60BBCA
SHA-256:	3A6C1001C36D7F2F8AD4DF369BAF38217AF3ADAAE94A5625651C05F4C3A38BD3
SHA-512:	215837C93B5FF3247D5912CEC24216CFF64C16DC6B07F620424E9DB101DC6FDDC792B546F42744D74FF08785D6CA2143A6D45F5C1D4B84E357DAB942456BA42D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/amaticsc/v26/TUZyzwprpvBS1izr_vO0CA.woff2
Preview:	wOF2.......D......(@..............................>..l....`..d..$..m.....h..&.....6.$..X. ..x.....<[..q..].)..].....'0}@..2%~.s..<mE...n..,U.......d2........XV...Q..Hexa.f.lE.&...c1....T..4...e..Uj....{..qL2.p........ZG..(.YKz.-......M.=.5q.3.f..C_ ..Q..Y.F.p6..E..T..$...H..I3..g'/M..OE../.n..M/=.f.......G.r.h.......i)k....I.c...Y.`.{.O[WCe.]Um.F&Z.u`"..........S.W....Y..}"..i..T.....gl.......H.m..b..Jru.KH....$.PI.J.....+..q.$.p.m..ZY.U.g.@4..:VAV.N.ed.....\...~..s..........h.h.....d..A.....~..Q..O...v.;....l....,..KJHI.J..E.b`4.).}g.y....mz......!:GBu.).....>.`.....>W...Ad.,@.!.D............T.S.!..jf....N......WnU....X.9..t.....F..JNz0....x=..2.u.....!.....=....}.M.DY....b_R..W.<..?.l.!.[.m.6.T.X..B;h..^.B).u./g...].....$.l7....G,.ff.J..L........%..?..6a..G.........$......X.U.e.>....v3.m&Y...nX> .V0p.I^.Jw\.b[...=3..P..<...Av.k.......Ia.....x......Ja......jSH.......P.6>Qi.*..m..b%N+F.......O..{.s.O...XqR.j......P...)/i/..&.R..i6.......iw.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=z07sz6ccpy6w
Preview:	GIF89a.............!.......,...........D..;

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 21, 2024 11:00:45.232121944 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 21, 2024 11:00:47.822410107 CEST	49735	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:47.822448015 CEST	443	49735	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:47.822513103 CEST	49735	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:47.822668076 CEST	49736	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:47.822722912 CEST	443	49736	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:47.822789907 CEST	49736	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:47.822905064 CEST	49735	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:47.822921991 CEST	443	49735	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:47.823117971 CEST	49736	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:47.823148012 CEST	443	49736	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:48.433679104 CEST	443	49735	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:48.434006929 CEST	49735	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:48.434035063 CEST	443	49735	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:48.435039043 CEST	443	49735	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:48.435117006 CEST	49735	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:48.437057972 CEST	49735	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:48.437129021 CEST	443	49735	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:48.437258959 CEST	49735	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:48.437267065 CEST	443	49735	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:48.443484068 CEST	443	49736	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:48.447211027 CEST	49736	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:48.447259903 CEST	443	49736	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:48.448349953 CEST	443	49736	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:48.448451042 CEST	49736	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:48.448684931 CEST	49736	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:48.448750973 CEST	443	49736	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:48.492042065 CEST	49736	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:48.492073059 CEST	443	49736	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:48.534708977 CEST	49735	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:48.535131931 CEST	49736	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:48.646775961 CEST	443	49735	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:48.646922112 CEST	443	49735	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:48.646984100 CEST	49735	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:48.661345959 CEST	49735	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:00:48.661358118 CEST	443	49735	199.36.158.100	192.168.2.4
Oct 21, 2024 11:00:48.691147089 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:48.691258907 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:48.691329002 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:48.691705942 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:48.691755056 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:49.566833973 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:49.567116022 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:49.567161083 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:49.568500042 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:49.568578005 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:49.571098089 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:49.571171045 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:49.572249889 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:49.572334051 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:49.572485924 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:49.572500944 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:49.624838114 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.025712967 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.025755882 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.025818110 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.034049988 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.034126043 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.034183025 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.034235954 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.042562962 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.042625904 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.145652056 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.145728111 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.145751953 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.145802975 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.145823002 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.145863056 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.146745920 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.150446892 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.150497913 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.150507927 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.159286022 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.159337044 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.159343958 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.168229103 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.168284893 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.168297052 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.176843882 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.176913023 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.176918030 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.176944971 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.177004099 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.179646015 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 21, 2024 11:00:50.179681063 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 21, 2024 11:00:50.179764986 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 21, 2024 11:00:50.179940939 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 21, 2024 11:00:50.179966927 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 21, 2024 11:00:50.185774088 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.194679976 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.194756031 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.194761992 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.194786072 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.194835901 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.215982914 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.264483929 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.264518976 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.266227961 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.266304016 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.266311884 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.266391993 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.266453981 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.266460896 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.266552925 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.266598940 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.266603947 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.268050909 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.268104076 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.268110037 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.268198013 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.268243074 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.268249035 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.268361092 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.268410921 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.268418074 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.271099091 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.271153927 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.271159887 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.271231890 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.271281958 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.271287918 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.279941082 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.280014992 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.280020952 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.281306028 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.281375885 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.281387091 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.281683922 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:50.281779051 CEST	443	49737	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:50.281845093 CEST	49737	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:51.027918100 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 21, 2024 11:00:51.034889936 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 21, 2024 11:00:51.034904957 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 21, 2024 11:00:51.035974979 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 21, 2024 11:00:51.036046982 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 21, 2024 11:00:51.037533045 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 21, 2024 11:00:51.037607908 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 21, 2024 11:00:51.078285933 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 21, 2024 11:00:51.078303099 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 21, 2024 11:00:51.102695942 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:51.102715015 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:51.102791071 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:51.104764938 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:51.104782104 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:51.124579906 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 21, 2024 11:00:51.959510088 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:51.959573984 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:51.964368105 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:51.964376926 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:51.964776039 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:52.012356997 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:52.105186939 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:52.105231047 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:52.105282068 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:52.106436014 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:52.106455088 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:52.183126926 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:52.227444887 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:52.426320076 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:52.426460981 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:52.426520109 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:52.426563025 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:52.426573038 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:52.426584005 CEST	49746	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:52.426589012 CEST	443	49746	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:52.487549067 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:52.487580061 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:52.487653017 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:52.487968922 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:52.487978935 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:52.967844009 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:52.968061924 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:52.968081951 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:52.968430042 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:52.968445063 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:52.968493938 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:52.968504906 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:52.968650103 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:52.969105959 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:52.970210075 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:52.970210075 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:52.970231056 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:52.970274925 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.017014027 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.017030001 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.064897060 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.351708889 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:53.352756977 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:53.353104115 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:53.353108883 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:53.353586912 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:53.354645014 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:53.395442009 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:53.404021978 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.404058933 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.404465914 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.404485941 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.408385038 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.408463001 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.408471107 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.417073965 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.417376995 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.417401075 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.426083088 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.426563025 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.426570892 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.473491907 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.473511934 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.518794060 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.522524118 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.522567987 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.522588015 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.522752047 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.522759914 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.526670933 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.526694059 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.526712894 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.526781082 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.526787996 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.528564930 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.535665035 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.535746098 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.537051916 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.537058115 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.544384003 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.546813011 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.546818972 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.547152996 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.550887108 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.550893068 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.555999994 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.559258938 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.559287071 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.593368053 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.593391895 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.593455076 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.593466997 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.595026970 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.600992918 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:53.601138115 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:53.603183031 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:53.603854895 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:53.603854895 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 21, 2024 11:00:53.603867054 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:53.603876114 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 21, 2024 11:00:53.641067982 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.641110897 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.641144037 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.641158104 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.641180038 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.641225100 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.641305923 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.641397953 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.641429901 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.641436100 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.644828081 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.644867897 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.644875050 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.645023108 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.645047903 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.645067930 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.645070076 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.645077944 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.645106077 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.645550013 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.645592928 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.645761013 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.645803928 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.645840883 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.645848036 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.653744936 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.653773069 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.653785944 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.653793097 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.653826952 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.653984070 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.656558990 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.656599045 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.656605959 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.662688971 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.662734985 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.662741899 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.665849924 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.665903091 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.665910006 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.670304060 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.670342922 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.670350075 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.675146103 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.675199986 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.675205946 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.679933071 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.679977894 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.679984093 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.684806108 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.684849024 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.684855938 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.712069035 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.712105989 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.712112904 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.712127924 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.712146997 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.712167978 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.712172985 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.712207079 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.759346962 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.759500980 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.759546041 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.759547949 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.759565115 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.759591103 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.759607077 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.759613991 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.759650946 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.760271072 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.760601044 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.760629892 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.760636091 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.760642052 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.760679007 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.760684967 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.761285067 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.761310101 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.761321068 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.761326075 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.761360884 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.761367083 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.762048960 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.762085915 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.762092113 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.763197899 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.763232946 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.763238907 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.763324022 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.763360977 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.763366938 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.810863018 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.868489027 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.868547916 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:53.868594885 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.972516060 CEST	49749	443	192.168.2.4	142.250.181.225
Oct 21, 2024 11:00:53.972539902 CEST	443	49749	142.250.181.225	192.168.2.4
Oct 21, 2024 11:00:54.005664110 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:54.005692005 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:54.005755901 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:54.005927086 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:54.005947113 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:54.410583973 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:54.410618067 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:54.410680056 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:54.411139965 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:54.411154985 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:54.414979935 CEST	49765	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:54.415003061 CEST	443	49765	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:54.415062904 CEST	49765	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:54.415364027 CEST	49765	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:54.415374994 CEST	443	49765	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:54.489774942 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:54.489798069 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:54.489862919 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:54.491261959 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:54.491275072 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:54.877487898 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:54.920027018 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:54.951220989 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:54.951235056 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:54.952876091 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:54.952922106 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:54.952955961 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:54.952972889 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:54.953003883 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:54.953027010 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:54.955452919 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:54.955812931 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:54.955998898 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:54.956460953 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:54.956475973 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:54.998472929 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.205055952 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.205167055 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.205240965 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.205256939 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.209234953 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.209307909 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.209321976 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.218183994 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.218259096 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.218274117 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.226721048 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.226782084 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.226795912 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.235644102 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.235697985 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.235713005 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.244323969 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.244379997 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.244407892 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.253226042 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.253282070 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.253295898 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.268822908 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.270713091 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.270737886 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.271544933 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.271603107 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.272568941 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.272612095 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.272989035 CEST	443	49765	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:55.273325920 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.273416042 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.273550034 CEST	49765	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:55.273560047 CEST	443	49765	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:55.273905993 CEST	443	49765	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:55.273967028 CEST	49765	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:55.274574041 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.274574041 CEST	443	49765	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:55.274580956 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.274632931 CEST	49765	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:55.274661064 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.274693966 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.293524027 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.293538094 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.326668024 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.326726913 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.326742887 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.330497026 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.330563068 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.330570936 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.330598116 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.330645084 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.339559078 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.348324060 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.348378897 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.348392963 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.356911898 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.357203007 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.357253075 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.357273102 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.357685089 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.357701063 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.358949900 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.360068083 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.360261917 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.360462904 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.360477924 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.360517025 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.366061926 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.366134882 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.366149902 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.375022888 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.375077963 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.375101089 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.375125885 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.375171900 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.383902073 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.392498970 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.392553091 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.392568111 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.400711060 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.400763988 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.400778055 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.408425093 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.408490896 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.408499956 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.408523083 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.408572912 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.416316032 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.423610926 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.423660040 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.423674107 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.431452036 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.431512117 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.431524992 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.439193964 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.439244986 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.439260006 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.447474003 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.447519064 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.447532892 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.447630882 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.447679996 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.447693110 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.452187061 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.452244043 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.452258110 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.457298994 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.457360029 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.457374096 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.462018967 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.462080956 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.462100029 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.466929913 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.466984034 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.466998100 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.471730947 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.471788883 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.471801996 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.477083921 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.481617928 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.481698990 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.483999014 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.484018087 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.486268044 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.486323118 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.486336946 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.491039991 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.491101027 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.491113901 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.495748997 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.495805979 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.495819092 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.500710011 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.500777960 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.500792027 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.505389929 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.505448103 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.505461931 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.524856091 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.524914026 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.524916887 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.524945021 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.524991989 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.525007010 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.525309086 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.525366068 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.525379896 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.525474072 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.525520086 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.525533915 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.529560089 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.529614925 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.529629946 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.534585953 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.534632921 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.534647942 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.539329052 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.539424896 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.539442062 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.543953896 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.544012070 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.544025898 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.590426922 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.590441942 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.591070890 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.591165066 CEST	443	49763	142.250.184.225	192.168.2.4
Oct 21, 2024 11:00:55.591231108 CEST	49763	443	192.168.2.4	142.250.184.225
Oct 21, 2024 11:00:55.641473055 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.641923904 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.642035007 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.642385960 CEST	443	49764	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.642463923 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.642463923 CEST	49764	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.765963078 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.766082048 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.766169071 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.766253948 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.766695023 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.766711950 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.774461031 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.774715900 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.774725914 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.783075094 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.788862944 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.788870096 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.821474075 CEST	49765	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:55.821584940 CEST	443	49765	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:55.822026968 CEST	49765	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:55.840399981 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.840408087 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.867392063 CEST	443	49765	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:55.871728897 CEST	49765	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:55.871736050 CEST	443	49765	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:55.884805918 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.884912014 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.884943008 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.884953022 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.885046959 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.885077953 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.885086060 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.885159969 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.885997057 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.890567064 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.890898943 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.890906096 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.899204016 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.899272919 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.899589062 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.899595976 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.899808884 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.907960892 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.916929960 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.917018890 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.917108059 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.917114973 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.918625116 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.920766115 CEST	49765	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:55.926204920 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.934319019 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.934874058 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.934880972 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.954400063 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.954509974 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:55.954515934 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:55.996649981 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.003854036 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.003998995 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.004098892 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.004120111 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.004128933 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.004264116 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.004376888 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.004544973 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.004575014 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.004582882 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.004709005 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.004740953 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.004749060 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.005445004 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.006510973 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.006741047 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.006773949 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.006782055 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.007764101 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.009902954 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.012958050 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.015495062 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.015531063 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.015537977 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.015882969 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.018428087 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.020931959 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.021213055 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.021220922 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.026835918 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.026952982 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.026959896 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.031630039 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.031698942 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.031704903 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.037013054 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.040136099 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.040144920 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.042660952 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.042800903 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.042807102 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.047642946 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.052701950 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.052709103 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.053072929 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.058394909 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.058434010 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.058442116 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.058686972 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.058692932 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.063792944 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.064760923 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.064766884 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.073502064 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.074537039 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.074610949 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.074645996 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.074655056 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.074666977 CEST	443	49765	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:56.076759100 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.119247913 CEST	49765	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:56.123270988 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.123379946 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.123481035 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.123590946 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.123620033 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.123629093 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.123728991 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.123760939 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.123768091 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.123892069 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.123923063 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.123929024 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.124460936 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.124466896 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.124521971 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.124541998 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.124676943 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.124752998 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.124766111 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.124773026 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.125365973 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.125392914 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.125399113 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.125500917 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.125566959 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.125597000 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.125603914 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.126620054 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.126763105 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.127772093 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.127778053 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.131916046 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.132359028 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.132370949 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.136321068 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.136766911 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.136773109 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.139338970 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.139770031 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.139775038 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.142462015 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.145375967 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.145411015 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.145420074 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.148453951 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.148487091 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.148494005 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.148771048 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.148777008 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.151381016 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.151561975 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.151567936 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.154166937 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.154786110 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.154792070 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.157012939 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.158198118 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.158205986 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.159794092 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.162621021 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.162655115 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.162662983 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.163765907 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.163772106 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.165535927 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.166774035 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.166780949 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.168190002 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.168287992 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.168294907 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.171127081 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.173691988 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.173727989 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.173733950 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.174031973 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.174037933 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.176764011 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.179075003 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.179111004 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.179121017 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.181763887 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.181796074 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.181802988 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.184309959 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.184341908 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.184349060 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.184760094 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.184766054 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.186784983 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.187767982 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.187774897 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.189551115 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.190260887 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.190267086 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.192220926 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.194724083 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.194813013 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.195444107 CEST	443	49765	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:56.195478916 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.195497036 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.195508003 CEST	443	49765	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:56.196764946 CEST	49765	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:56.197176933 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.197360992 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.197369099 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.199516058 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.199765921 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.199774981 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.201967955 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.204149008 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.204185963 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.204194069 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.206701994 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.206734896 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.206743002 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.208762884 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.208769083 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.208892107 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.211263895 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.211298943 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.211306095 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.211765051 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.241575956 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.241741896 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.241827011 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.241924047 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.241960049 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.241967916 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.242079020 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.242110968 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.242120028 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.242219925 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.242253065 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.242260933 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.242422104 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.242449999 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.242458105 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.242563963 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.242592096 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.242598057 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.242911100 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.242942095 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.242949963 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.243053913 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.243084908 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.243093014 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.243194103 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.243225098 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.243232012 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.243803978 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.243830919 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.243839025 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.243963957 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.244045973 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.244052887 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.244169950 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.244203091 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.244211912 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.244596004 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.244626999 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.244636059 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.244738102 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.244756937 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.244786024 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.245089054 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.245121002 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.245127916 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.246936083 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.246968985 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.246975899 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.247406960 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.247412920 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.247500896 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.248918056 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.251174927 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.251250982 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.252912045 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.252923965 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.253026009 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.253060102 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.253066063 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.255274057 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.255307913 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.255316973 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.256761074 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.257327080 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.259161949 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.259248972 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.259280920 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.259288073 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.259772062 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.260931015 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.262733936 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.262810946 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.262846947 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.262855053 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.262974977 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.264673948 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.266616106 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.266707897 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.266727924 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.266736031 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.268452883 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.268486023 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.268492937 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.268759966 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.270096064 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.271946907 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.272026062 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.273739100 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.273771048 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.273777962 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.274797916 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.274805069 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.274893045 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.275612116 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.277491093 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.277568102 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.279470921 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.279555082 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.279587984 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.279597044 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.280762911 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.281251907 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.282471895 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.282583952 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.282613039 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.282619953 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.283695936 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.284106016 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.285908937 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.286005974 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.287584066 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.287615061 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.287622929 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.289122105 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.289155006 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.289164066 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.290822029 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.290855885 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.290863037 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.292737007 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.292742968 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.292804956 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.292815924 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.294097900 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.294193983 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.295758009 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.295826912 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.295826912 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.295836926 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.297168970 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.297262907 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.298691988 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.298772097 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.298784971 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.298795938 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.300309896 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.300343037 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.300352097 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.301367044 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.301948071 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.303272009 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.303345919 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.303354025 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.303380013 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.304745913 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.304745913 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.304812908 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.306206942 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.306245089 CEST	49765	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:56.306261063 CEST	443	49765	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:56.306279898 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.306287050 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.306303024 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.307507992 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.307511091 CEST	49771	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:56.307549953 CEST	443	49771	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:56.307770967 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.307771921 CEST	49771	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:56.307805061 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.309441090 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.309482098 CEST	49771	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:56.309497118 CEST	443	49771	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:56.309513092 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.310681105 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.310714006 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.310722113 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.310782909 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.310789108 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.310909033 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.312074900 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.313596964 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.313674927 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.314894915 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.314970970 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.316220999 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.316251040 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.316261053 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.316759109 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.316765070 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.317718029 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.319073915 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.319112062 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.319118977 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.319776058 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.319782019 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.320362091 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.321599007 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.321634054 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.321640015 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.322786093 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.322791100 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.323050022 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.324347973 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.324374914 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.324382067 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.325634003 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.325664997 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.325675011 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.327050924 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.327090025 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.327097893 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.328460932 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.328497887 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.328505993 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.328758001 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.328764915 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.329530001 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.330784082 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.330816031 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.330826998 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.331773996 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.331780910 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.332216978 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.333242893 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.333276033 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.333282948 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.334528923 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.334563017 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.334570885 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.334784031 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.334789991 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.335912943 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.336963892 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.336996078 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.337002993 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.338109016 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.338145018 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.338151932 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.339312077 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.339345932 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.339354038 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.340503931 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.340533972 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.340540886 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.340759993 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.340765953 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.342179060 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.342797041 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.342830896 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.342838049 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.343075991 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.343081951 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.343518019 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.344024897 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.360796928 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.360836029 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.360846043 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.361017942 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.361048937 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.361057043 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.361217976 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.361257076 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.361265898 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.361365080 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.361397982 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.361403942 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.361526966 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.361555099 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.361562014 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.361699104 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.361731052 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.361737013 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.361869097 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.361900091 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.361908913 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.362018108 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.362047911 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.362056017 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.362163067 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.362198114 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.362205029 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.362348080 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.362381935 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.362387896 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.362492085 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.362519979 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.362528086 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.362649918 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.362680912 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.362693071 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.362761974 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.362796068 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.362803936 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.362867117 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.362874031 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.362942934 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.362966061 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.363014936 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.363071918 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.363096952 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.363111019 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.363190889 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.363245010 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.363251925 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.363298893 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.363318920 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.363408089 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.363620043 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.363653898 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.363661051 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.364521980 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.364551067 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.364557981 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.364761114 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.364767075 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.365892887 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.366507053 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.366535902 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.366544008 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.367686033 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.367718935 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.367726088 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.368570089 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.368587971 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.368613958 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.369735003 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.369770050 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.369776964 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.370399952 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.370431900 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.370440006 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.370786905 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.370793104 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.371489048 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.372410059 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.372440100 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.372447014 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.373481035 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.373517990 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.373523951 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.373966932 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.373972893 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.374511957 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.375350952 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.375387907 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.375395060 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.376280069 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.376312971 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.376321077 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.376770020 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.376775980 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.377377033 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.377712965 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.377720118 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.378218889 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.379125118 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.379157066 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.379163980 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.379781008 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.379786968 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.380043030 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.380830050 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.380857944 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.380866051 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.381783962 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.381815910 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.381824017 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.382630110 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.382661104 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.382668018 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.382793903 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.382800102 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.383805037 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.384243011 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.384248972 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.384567976 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.384800911 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.384808064 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.385427952 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.386306047 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.386384964 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.386416912 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.386425018 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.387216091 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.387243032 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.387250900 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.388149977 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.388183117 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.388191938 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.388555050 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.388773918 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.389827967 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.389925957 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.389952898 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.389959097 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.390403032 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.390557051 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.390611887 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.390635967 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.391624928 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.392324924 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.392355919 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.392364025 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.393222094 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.393254042 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.393260956 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.394025087 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.394057989 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.394063950 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.394783020 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.394788980 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.394973993 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.395716906 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.395742893 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.395750999 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.396581888 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.396610975 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.396619081 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.396687031 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.396692038 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.397592068 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.398359060 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.398437977 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.399245977 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.399277925 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.399286985 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.400046110 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.400079012 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.400088072 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.400758982 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.400764942 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.400862932 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.401642084 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.401673079 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.401679993 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.402697086 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.402720928 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.402728081 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.402951956 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.402959108 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.403330088 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.404278994 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.404310942 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.404319048 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.404921055 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.404956102 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.404963017 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.406789064 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.406795025 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.412025928 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.412123919 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.412508965 CEST	443	49766	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:56.412592888 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:56.412592888 CEST	49766	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:57.171037912 CEST	443	49771	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:57.171444893 CEST	49771	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:57.171471119 CEST	443	49771	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:57.172000885 CEST	443	49771	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:57.172060966 CEST	49771	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:57.173029900 CEST	443	49771	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:57.173078060 CEST	49771	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:57.173397064 CEST	49771	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:57.173472881 CEST	443	49771	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:57.173842907 CEST	49771	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:57.173849106 CEST	443	49771	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:57.173902988 CEST	49771	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:57.173933983 CEST	443	49771	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:57.225153923 CEST	49771	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:57.453336000 CEST	49778	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:57.453376055 CEST	443	49778	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:57.453452110 CEST	49778	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:57.454123974 CEST	49778	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:57.454169989 CEST	443	49778	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:57.462644100 CEST	443	49771	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:57.467418909 CEST	49779	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:57.467459917 CEST	443	49779	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:57.467509985 CEST	49779	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:57.467973948 CEST	49779	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:57.467987061 CEST	443	49779	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:57.568907976 CEST	49771	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:57.568926096 CEST	443	49771	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:57.570369959 CEST	49771	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:57.570468903 CEST	443	49771	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:57.570524931 CEST	49771	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:58.084362984 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 21, 2024 11:00:58.084362984 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 21, 2024 11:00:58.084388018 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 21, 2024 11:00:58.084398031 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 21, 2024 11:00:58.084496975 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 21, 2024 11:00:58.084501982 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 21, 2024 11:00:58.085720062 CEST	49786	443	192.168.2.4	173.222.162.32
Oct 21, 2024 11:00:58.085731983 CEST	443	49786	173.222.162.32	192.168.2.4
Oct 21, 2024 11:00:58.089035034 CEST	49786	443	192.168.2.4	173.222.162.32
Oct 21, 2024 11:00:58.089330912 CEST	49786	443	192.168.2.4	173.222.162.32
Oct 21, 2024 11:00:58.089342117 CEST	443	49786	173.222.162.32	192.168.2.4
Oct 21, 2024 11:00:58.305516958 CEST	443	49778	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:58.305897951 CEST	49778	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:58.305907965 CEST	443	49778	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:58.306273937 CEST	443	49778	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:58.306519032 CEST	49778	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:58.307226896 CEST	443	49778	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:58.307291985 CEST	49778	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:58.307753086 CEST	49778	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:58.307753086 CEST	49778	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:58.307765961 CEST	443	49778	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:58.307811975 CEST	443	49778	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:58.307920933 CEST	49778	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:58.307950020 CEST	443	49778	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:58.338814974 CEST	443	49779	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:58.340543032 CEST	49779	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:58.340555906 CEST	443	49779	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:58.340924978 CEST	443	49779	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:58.341135979 CEST	49779	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:58.341622114 CEST	443	49779	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:58.342103004 CEST	49779	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:58.342365026 CEST	49779	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:58.342427015 CEST	443	49779	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:58.342577934 CEST	49779	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:58.342770100 CEST	49779	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:58.342787981 CEST	443	49779	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:58.459547043 CEST	49778	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:58.459553957 CEST	443	49778	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:58.471729994 CEST	49787	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:00:58.471744061 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:00:58.471904039 CEST	49787	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:00:58.472906113 CEST	49787	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:00:58.472918987 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:00:58.498629093 CEST	49779	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:58.568928957 CEST	49778	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:58.611903906 CEST	443	49778	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:58.733076096 CEST	443	49778	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:58.733124018 CEST	49778	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:58.734118938 CEST	49778	443	192.168.2.4	142.250.185.142
Oct 21, 2024 11:00:58.734129906 CEST	443	49778	142.250.185.142	192.168.2.4
Oct 21, 2024 11:00:58.767602921 CEST	443	49786	173.222.162.32	192.168.2.4
Oct 21, 2024 11:00:58.767673016 CEST	49786	443	192.168.2.4	173.222.162.32
Oct 21, 2024 11:00:58.842245102 CEST	443	49779	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:58.845841885 CEST	49779	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:58.845884085 CEST	443	49779	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:58.845982075 CEST	49779	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:58.855627060 CEST	49791	443	192.168.2.4	172.217.18.110
Oct 21, 2024 11:00:58.855647087 CEST	443	49791	172.217.18.110	192.168.2.4
Oct 21, 2024 11:00:58.855700016 CEST	49791	443	192.168.2.4	172.217.18.110
Oct 21, 2024 11:00:58.855870008 CEST	49791	443	192.168.2.4	172.217.18.110
Oct 21, 2024 11:00:58.855884075 CEST	443	49791	172.217.18.110	192.168.2.4
Oct 21, 2024 11:00:58.952003002 CEST	49792	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:58.952044010 CEST	443	49792	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:58.952095985 CEST	49792	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:58.952742100 CEST	49792	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:58.952754974 CEST	443	49792	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:59.721441031 CEST	443	49791	172.217.18.110	192.168.2.4
Oct 21, 2024 11:00:59.721792936 CEST	49791	443	192.168.2.4	172.217.18.110
Oct 21, 2024 11:00:59.721810102 CEST	443	49791	172.217.18.110	192.168.2.4
Oct 21, 2024 11:00:59.722167015 CEST	443	49791	172.217.18.110	192.168.2.4
Oct 21, 2024 11:00:59.722265959 CEST	49791	443	192.168.2.4	172.217.18.110
Oct 21, 2024 11:00:59.722846031 CEST	443	49791	172.217.18.110	192.168.2.4
Oct 21, 2024 11:00:59.722902060 CEST	49791	443	192.168.2.4	172.217.18.110
Oct 21, 2024 11:00:59.723244905 CEST	49791	443	192.168.2.4	172.217.18.110
Oct 21, 2024 11:00:59.723305941 CEST	443	49791	172.217.18.110	192.168.2.4
Oct 21, 2024 11:00:59.724327087 CEST	49791	443	192.168.2.4	172.217.18.110
Oct 21, 2024 11:00:59.724334002 CEST	443	49791	172.217.18.110	192.168.2.4
Oct 21, 2024 11:00:59.780775070 CEST	49791	443	192.168.2.4	172.217.18.110
Oct 21, 2024 11:00:59.825459003 CEST	443	49792	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:59.825751066 CEST	49792	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:59.825768948 CEST	443	49792	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:59.826987028 CEST	443	49792	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:59.827106953 CEST	49792	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:59.829518080 CEST	443	49792	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:59.829688072 CEST	49792	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:59.829996109 CEST	49792	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:59.830166101 CEST	443	49792	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:59.830190897 CEST	49792	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:59.875401020 CEST	443	49792	142.250.185.206	192.168.2.4
Oct 21, 2024 11:00:59.951791048 CEST	49792	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:00:59.951800108 CEST	443	49792	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:00.068119049 CEST	49792	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:01:00.086180925 CEST	443	49792	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:00.086292982 CEST	443	49792	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:00.086508989 CEST	49792	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:01:00.086519003 CEST	443	49792	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:00.087662935 CEST	49792	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:01:00.087692976 CEST	443	49792	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:00.087790966 CEST	49792	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:01:00.088373899 CEST	49799	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:01:00.088402987 CEST	443	49799	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:00.088753939 CEST	49799	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:01:00.089023113 CEST	49799	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:01:00.089032888 CEST	443	49799	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:00.090565920 CEST	443	49791	172.217.18.110	192.168.2.4
Oct 21, 2024 11:01:00.090615034 CEST	443	49791	172.217.18.110	192.168.2.4
Oct 21, 2024 11:01:00.090641975 CEST	443	49791	172.217.18.110	192.168.2.4
Oct 21, 2024 11:01:00.090699911 CEST	49791	443	192.168.2.4	172.217.18.110
Oct 21, 2024 11:01:00.090711117 CEST	443	49791	172.217.18.110	192.168.2.4
Oct 21, 2024 11:01:00.090764046 CEST	49791	443	192.168.2.4	172.217.18.110
Oct 21, 2024 11:01:00.094073057 CEST	443	49791	172.217.18.110	192.168.2.4
Oct 21, 2024 11:01:00.094259977 CEST	49791	443	192.168.2.4	172.217.18.110
Oct 21, 2024 11:01:00.094295979 CEST	443	49791	172.217.18.110	192.168.2.4
Oct 21, 2024 11:01:00.094403028 CEST	49791	443	192.168.2.4	172.217.18.110
Oct 21, 2024 11:01:00.399786949 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:00.400187016 CEST	49787	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:00.465857029 CEST	49787	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:00.465904951 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:00.466855049 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:00.512254000 CEST	49787	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:00.948405981 CEST	443	49799	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:00.948653936 CEST	49799	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:01:00.948673010 CEST	443	49799	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:00.949028015 CEST	443	49799	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:00.949086905 CEST	49799	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:01:00.949707031 CEST	443	49799	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:00.949750900 CEST	49799	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:01:00.949969053 CEST	49799	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:01:00.950025082 CEST	443	49799	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:00.950114012 CEST	49799	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:01:00.950119972 CEST	443	49799	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:00.996184111 CEST	49799	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:01:01.020215988 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 21, 2024 11:01:01.020273924 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 21, 2024 11:01:01.020314932 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 21, 2024 11:01:01.206954002 CEST	443	49799	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:01.206984043 CEST	443	49799	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:01.207020998 CEST	49799	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:01:01.207035065 CEST	443	49799	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:01.208053112 CEST	49799	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:01:01.208084106 CEST	443	49799	142.250.185.206	192.168.2.4
Oct 21, 2024 11:01:01.208129883 CEST	49799	443	192.168.2.4	142.250.185.206
Oct 21, 2024 11:01:01.439789057 CEST	49787	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:01.483428955 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:01.733676910 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:01.733720064 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:01.733740091 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:01.733779907 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:01.733814955 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:01.733815908 CEST	49787	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:01.733843088 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:01.733859062 CEST	49787	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:01.733872890 CEST	49787	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:01.733947992 CEST	49787	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:01.734191895 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:01.734297037 CEST	49787	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:01.734306097 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:01.734611034 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:01.734782934 CEST	49787	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:02.619956017 CEST	49787	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:02.619990110 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:02.620017052 CEST	49787	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:02.620026112 CEST	443	49787	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:02.701422930 CEST	49744	443	192.168.2.4	142.250.186.68
Oct 21, 2024 11:01:02.701441050 CEST	443	49744	142.250.186.68	192.168.2.4
Oct 21, 2024 11:01:03.907283068 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 21, 2024 11:01:03.915738106 CEST	80	49723	199.232.214.172	192.168.2.4
Oct 21, 2024 11:01:03.915788889 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 21, 2024 11:01:15.848865032 CEST	51412	53	192.168.2.4	162.159.36.2
Oct 21, 2024 11:01:15.853748083 CEST	53	51412	162.159.36.2	192.168.2.4
Oct 21, 2024 11:01:15.853894949 CEST	51412	53	192.168.2.4	162.159.36.2
Oct 21, 2024 11:01:15.858887911 CEST	53	51412	162.159.36.2	192.168.2.4
Oct 21, 2024 11:01:16.451412916 CEST	51412	53	192.168.2.4	162.159.36.2
Oct 21, 2024 11:01:16.458408117 CEST	53	51412	162.159.36.2	192.168.2.4
Oct 21, 2024 11:01:16.458504915 CEST	51412	53	192.168.2.4	162.159.36.2
Oct 21, 2024 11:01:16.492650986 CEST	51413	443	192.168.2.4	52.165.164.15
Oct 21, 2024 11:01:16.492681026 CEST	443	51413	52.165.164.15	192.168.2.4
Oct 21, 2024 11:01:16.492820024 CEST	51413	443	192.168.2.4	52.165.164.15
Oct 21, 2024 11:01:16.493426085 CEST	51413	443	192.168.2.4	52.165.164.15
Oct 21, 2024 11:01:16.493441105 CEST	443	51413	52.165.164.15	192.168.2.4
Oct 21, 2024 11:01:17.315835953 CEST	443	51413	52.165.164.15	192.168.2.4
Oct 21, 2024 11:01:17.316051960 CEST	51413	443	192.168.2.4	52.165.164.15
Oct 21, 2024 11:01:17.319504976 CEST	51413	443	192.168.2.4	52.165.164.15
Oct 21, 2024 11:01:17.319509983 CEST	443	51413	52.165.164.15	192.168.2.4
Oct 21, 2024 11:01:17.319886923 CEST	443	51413	52.165.164.15	192.168.2.4
Oct 21, 2024 11:01:17.327693939 CEST	51413	443	192.168.2.4	52.165.164.15
Oct 21, 2024 11:01:17.375410080 CEST	443	51413	52.165.164.15	192.168.2.4
Oct 21, 2024 11:01:17.476320028 CEST	443	51413	52.165.164.15	192.168.2.4
Oct 21, 2024 11:01:17.476479053 CEST	51413	443	192.168.2.4	52.165.164.15
Oct 21, 2024 11:01:17.476492882 CEST	443	51413	52.165.164.15	192.168.2.4
Oct 21, 2024 11:01:17.476536036 CEST	51413	443	192.168.2.4	52.165.164.15
Oct 21, 2024 11:01:17.476624966 CEST	443	51413	52.165.164.15	192.168.2.4
Oct 21, 2024 11:01:17.476659060 CEST	443	51413	52.165.164.15	192.168.2.4
Oct 21, 2024 11:01:17.476703882 CEST	51413	443	192.168.2.4	52.165.164.15
Oct 21, 2024 11:01:17.479226112 CEST	51413	443	192.168.2.4	52.165.164.15
Oct 21, 2024 11:01:17.512296915 CEST	51414	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:17.512309074 CEST	443	51414	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:17.512430906 CEST	51414	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:17.512671947 CEST	51414	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:17.512685061 CEST	443	51414	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:17.913953066 CEST	443	49786	173.222.162.32	192.168.2.4
Oct 21, 2024 11:01:17.914038897 CEST	49786	443	192.168.2.4	173.222.162.32
Oct 21, 2024 11:01:18.430749893 CEST	443	51414	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:18.430816889 CEST	51414	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:18.432212114 CEST	51414	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:18.432218075 CEST	443	51414	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:18.432446957 CEST	443	51414	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:18.433516979 CEST	51414	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:18.479399920 CEST	443	51414	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:18.616565943 CEST	443	51414	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:18.616765976 CEST	51414	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:18.616790056 CEST	443	51414	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:18.616801023 CEST	51414	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:18.616945982 CEST	443	51414	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:18.616976976 CEST	443	51414	52.149.20.212	192.168.2.4
Oct 21, 2024 11:01:18.617028952 CEST	51414	443	192.168.2.4	52.149.20.212
Oct 21, 2024 11:01:19.667104959 CEST	51415	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:19.667128086 CEST	443	51415	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:19.667277098 CEST	51415	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:19.668359995 CEST	51415	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:19.668373108 CEST	443	51415	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:20.488138914 CEST	443	51415	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:20.488208055 CEST	51415	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:20.489881992 CEST	51415	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:20.489887953 CEST	443	51415	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:20.490216017 CEST	443	51415	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:20.491287947 CEST	51415	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:20.535399914 CEST	443	51415	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:20.763663054 CEST	443	51415	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:20.763690948 CEST	443	51415	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:20.763710022 CEST	443	51415	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:20.763763905 CEST	51415	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:20.763775110 CEST	443	51415	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:20.763808012 CEST	51415	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:20.763850927 CEST	51415	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:20.764425039 CEST	443	51415	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:20.764513016 CEST	51415	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:20.764520884 CEST	443	51415	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:20.764753103 CEST	443	51415	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:20.764889002 CEST	51415	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:20.768584013 CEST	51415	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:20.768590927 CEST	443	51415	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:20.768625021 CEST	51415	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:20.768630028 CEST	443	51415	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:21.010833025 CEST	51416	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:21.010890007 CEST	443	51416	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:21.011033058 CEST	51416	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:21.011409044 CEST	51416	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:21.011425972 CEST	443	51416	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:21.929932117 CEST	443	51416	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:21.930023909 CEST	51416	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:21.932882071 CEST	51416	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:21.932895899 CEST	443	51416	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:21.933218956 CEST	443	51416	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:21.935101032 CEST	51416	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:21.979413033 CEST	443	51416	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:22.201914072 CEST	443	51416	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:22.201945066 CEST	443	51416	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:22.201963902 CEST	443	51416	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:22.202013016 CEST	51416	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:22.202035904 CEST	443	51416	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:22.202053070 CEST	51416	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:22.202076912 CEST	51416	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:22.204217911 CEST	443	51416	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:22.204257965 CEST	443	51416	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:22.204293966 CEST	51416	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:22.204301119 CEST	443	51416	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:22.204313040 CEST	443	51416	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:22.204335928 CEST	51416	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:22.204349995 CEST	51416	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:22.208837986 CEST	51416	443	192.168.2.4	20.109.210.53
Oct 21, 2024 11:01:22.208853006 CEST	443	51416	20.109.210.53	192.168.2.4
Oct 21, 2024 11:01:33.496942043 CEST	49736	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:01:33.496965885 CEST	443	49736	199.36.158.100	192.168.2.4
Oct 21, 2024 11:01:40.439022064 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:40.439054966 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:40.439204931 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:40.439476013 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:40.439492941 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.189028025 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.189093113 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.190654993 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.190670967 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.190872908 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.199193001 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.243398905 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.430167913 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.430186033 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.430201054 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.430255890 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.430279970 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.430325031 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.451716900 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.451733112 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.451786995 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.451807022 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.451826096 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.451924086 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.550867081 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.550888062 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.550971031 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.550997019 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.551091909 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.571806908 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.571830034 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.571871042 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.571890116 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.571913004 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.571933985 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.573580980 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.573596001 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.573649883 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.573662043 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.573704004 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.617158890 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.617180109 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.617243052 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.617263079 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.617310047 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.671283007 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.671300888 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.671371937 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.671400070 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.671437025 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.690973043 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.690994978 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.691046953 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.691062927 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.691102982 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.693252087 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.693280935 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.693315029 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.693325043 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.693351030 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.693368912 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.694680929 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.694694996 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.694745064 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.694756031 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.694802999 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.696540117 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.696553946 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.696616888 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.696628094 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.696667910 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.698311090 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.698324919 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.698394060 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.698406935 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.698445082 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.738495111 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.738509893 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.738821030 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.738840103 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.738889933 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.790005922 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.790075064 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.790077925 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.790123940 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.790190935 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.790210962 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.790222883 CEST	51419	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.790230036 CEST	443	51419	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.836731911 CEST	51420	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.836769104 CEST	443	51420	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.836899996 CEST	51420	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.837132931 CEST	51420	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.837145090 CEST	443	51420	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.838820934 CEST	51421	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.838869095 CEST	443	51421	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.838928938 CEST	51421	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.839071989 CEST	51421	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.839088917 CEST	443	51421	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.840029001 CEST	51422	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.840040922 CEST	443	51422	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.840087891 CEST	51422	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.840228081 CEST	51422	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.840241909 CEST	443	51422	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.841643095 CEST	51423	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.841651917 CEST	443	51423	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.841875076 CEST	51423	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.842433929 CEST	51424	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.842441082 CEST	443	51424	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.842505932 CEST	51424	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.842808008 CEST	51423	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.842817068 CEST	443	51423	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:41.842964888 CEST	51424	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:41.842972994 CEST	443	51424	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.563240051 CEST	443	51420	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.563750982 CEST	51420	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.563771963 CEST	443	51420	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.564168930 CEST	51420	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.564172983 CEST	443	51420	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.568747044 CEST	443	51423	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.569048882 CEST	51423	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.569056034 CEST	443	51423	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.569339991 CEST	51423	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.569343090 CEST	443	51423	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.575239897 CEST	443	51421	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.575653076 CEST	51421	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.575684071 CEST	443	51421	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.576282024 CEST	51421	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.576288939 CEST	443	51421	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.581475019 CEST	443	51424	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.581765890 CEST	51424	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.581779957 CEST	443	51424	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.582089901 CEST	51424	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.582094908 CEST	443	51424	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.604584932 CEST	443	51422	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.604888916 CEST	51422	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.604923010 CEST	443	51422	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.605247974 CEST	51422	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.605259895 CEST	443	51422	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.692965984 CEST	443	51420	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.692989111 CEST	443	51420	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.693038940 CEST	51420	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.693049908 CEST	443	51420	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.693061113 CEST	443	51420	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.693094015 CEST	51420	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.693269014 CEST	51420	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.693284035 CEST	443	51420	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.693291903 CEST	51420	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.693295956 CEST	443	51420	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.696455956 CEST	51425	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.696542025 CEST	443	51425	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.696801901 CEST	51425	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.696801901 CEST	51425	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.696883917 CEST	443	51425	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.698807955 CEST	443	51423	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.698826075 CEST	443	51423	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.698870897 CEST	51423	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.698879004 CEST	443	51423	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.699093103 CEST	51423	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.699093103 CEST	51423	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.699100018 CEST	443	51423	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.699140072 CEST	443	51423	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.699179888 CEST	443	51423	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.699282885 CEST	51423	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.701657057 CEST	51426	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.701682091 CEST	443	51426	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.701776028 CEST	51426	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.701957941 CEST	51426	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.701987028 CEST	443	51426	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.709600925 CEST	443	51424	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.709758997 CEST	443	51424	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.709808111 CEST	51424	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.709851027 CEST	51424	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.709855080 CEST	443	51424	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.709863901 CEST	51424	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.709867001 CEST	443	51424	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.711539030 CEST	51427	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.711556911 CEST	443	51427	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.711704969 CEST	51427	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.711829901 CEST	51427	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.711839914 CEST	443	51427	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.714534998 CEST	443	51421	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.714581013 CEST	443	51421	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.714643955 CEST	51421	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.714682102 CEST	443	51421	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.714709997 CEST	443	51421	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.714739084 CEST	51421	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.714771986 CEST	51421	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.714829922 CEST	51421	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.714829922 CEST	51421	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.714854002 CEST	443	51421	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.714875937 CEST	443	51421	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.716590881 CEST	51428	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.716631889 CEST	443	51428	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.716691971 CEST	51428	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.716818094 CEST	51428	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.716834068 CEST	443	51428	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.738014936 CEST	443	51422	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.738320112 CEST	443	51422	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.738370895 CEST	51422	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.738404989 CEST	51422	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.738404989 CEST	51422	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.738419056 CEST	443	51422	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.738445997 CEST	443	51422	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.740196943 CEST	51429	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.740238905 CEST	443	51429	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:42.740376949 CEST	51429	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.740449905 CEST	51429	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:42.740469933 CEST	443	51429	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.418030024 CEST	443	51425	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.418587923 CEST	51425	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.418623924 CEST	443	51425	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.419204950 CEST	51425	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.419222116 CEST	443	51425	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.442023039 CEST	443	51428	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.446050882 CEST	51428	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.446050882 CEST	51428	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.446073055 CEST	443	51428	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.446086884 CEST	443	51428	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.452275038 CEST	443	51426	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.452629089 CEST	51426	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.452639103 CEST	443	51426	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.453937054 CEST	51426	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.453942060 CEST	443	51426	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.466012001 CEST	443	51427	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.468118906 CEST	443	51429	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.469037056 CEST	51427	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.469058990 CEST	443	51427	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.470830917 CEST	51427	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.470837116 CEST	443	51427	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.479887962 CEST	51429	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.479901075 CEST	443	51429	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.486471891 CEST	51429	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.486478090 CEST	443	51429	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.546439886 CEST	443	51425	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.546624899 CEST	443	51425	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.546972990 CEST	51425	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.548280954 CEST	51425	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.548305035 CEST	443	51425	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.548343897 CEST	51425	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.548362017 CEST	443	51425	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.558895111 CEST	51430	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.558912992 CEST	443	51430	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.563256979 CEST	51430	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.563744068 CEST	51430	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.563760042 CEST	443	51430	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.569148064 CEST	443	51428	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.569304943 CEST	443	51428	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.569425106 CEST	51428	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.569566965 CEST	51428	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.569566965 CEST	51428	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.569590092 CEST	443	51428	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.569603920 CEST	443	51428	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.574956894 CEST	51431	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.574980021 CEST	443	51431	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.575073004 CEST	51431	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.575553894 CEST	51431	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.575567961 CEST	443	51431	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.586374044 CEST	443	51426	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.586452007 CEST	443	51426	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.587121964 CEST	51426	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.587121964 CEST	51426	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.590586901 CEST	51426	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.590595961 CEST	51432	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.590605021 CEST	443	51426	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.590694904 CEST	443	51432	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.590945959 CEST	51432	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.590945959 CEST	51432	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.591032982 CEST	443	51432	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.601661921 CEST	443	51427	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.601789951 CEST	443	51427	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.601897001 CEST	51427	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.602081060 CEST	51427	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.602081060 CEST	51427	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.602092981 CEST	443	51427	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.602101088 CEST	443	51427	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.607018948 CEST	51433	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.607047081 CEST	443	51433	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.607139111 CEST	51433	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.607408047 CEST	51433	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.607419014 CEST	443	51433	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.612823009 CEST	443	51429	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.612876892 CEST	443	51429	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.615047932 CEST	51429	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.615047932 CEST	51429	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.615103006 CEST	51429	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.615111113 CEST	443	51429	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.618488073 CEST	51434	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.618496895 CEST	443	51434	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:43.618649960 CEST	51434	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.618841887 CEST	51434	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:43.618850946 CEST	443	51434	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.307555914 CEST	443	51430	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.308253050 CEST	51430	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.308265924 CEST	443	51430	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.309025049 CEST	51430	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.309031010 CEST	443	51430	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.329576015 CEST	443	51432	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.329920053 CEST	51432	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.329974890 CEST	443	51432	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.330384970 CEST	51432	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.330401897 CEST	443	51432	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.331756115 CEST	443	51431	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.332113981 CEST	51431	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.332149029 CEST	443	51431	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.332566023 CEST	51431	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.332573891 CEST	443	51431	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.368196011 CEST	443	51433	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.368748903 CEST	51433	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.368777037 CEST	443	51433	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.368952036 CEST	443	51434	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.369231939 CEST	51433	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.369236946 CEST	443	51433	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.369426012 CEST	51434	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.369432926 CEST	443	51434	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.369759083 CEST	51434	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.369762897 CEST	443	51434	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.439749002 CEST	443	51430	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.439807892 CEST	443	51430	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.439986944 CEST	51430	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.440022945 CEST	51430	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.440030098 CEST	443	51430	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.440040112 CEST	51430	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.440043926 CEST	443	51430	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.442907095 CEST	51435	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.442980051 CEST	443	51435	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.443074942 CEST	51435	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.443237066 CEST	51435	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.443272114 CEST	443	51435	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.458755016 CEST	443	51432	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.459081888 CEST	443	51432	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.459163904 CEST	51432	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.459218025 CEST	51432	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.459240913 CEST	443	51432	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.459275961 CEST	51432	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.459289074 CEST	443	51432	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.461384058 CEST	51436	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.461412907 CEST	443	51436	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.461517096 CEST	51436	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.461699009 CEST	51436	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.461713076 CEST	443	51436	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.466583014 CEST	443	51431	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.466837883 CEST	443	51431	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.466898918 CEST	51431	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.466931105 CEST	51431	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.466953039 CEST	443	51431	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.466967106 CEST	51431	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.466972113 CEST	443	51431	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.469019890 CEST	51437	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.469049931 CEST	443	51437	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.469120026 CEST	51437	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.469321966 CEST	51437	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.469333887 CEST	443	51437	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.501643896 CEST	443	51434	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.501701117 CEST	443	51434	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.501754999 CEST	51434	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.501873970 CEST	51434	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.501888037 CEST	443	51434	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.501897097 CEST	51434	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.501900911 CEST	443	51434	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.502757072 CEST	443	51433	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.503000975 CEST	443	51433	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.503056049 CEST	51433	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.503143072 CEST	51433	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.503146887 CEST	443	51433	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.503161907 CEST	51433	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.503165960 CEST	443	51433	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.504529953 CEST	51438	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.504550934 CEST	443	51438	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.504707098 CEST	51438	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.505021095 CEST	51438	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.505031109 CEST	443	51438	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.505182028 CEST	51439	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.505192995 CEST	443	51439	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:44.505323887 CEST	51439	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.505443096 CEST	51439	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:44.505459070 CEST	443	51439	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.178021908 CEST	443	51435	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.179075003 CEST	51435	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.179100037 CEST	443	51435	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.180289984 CEST	51435	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.180301905 CEST	443	51435	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.206259012 CEST	443	51437	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.210552931 CEST	443	51436	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.210673094 CEST	51437	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.210684061 CEST	443	51437	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.211524010 CEST	51437	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.211529016 CEST	443	51437	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.212233067 CEST	51436	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.212254047 CEST	443	51436	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.213201046 CEST	51436	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.213207006 CEST	443	51436	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.249294996 CEST	443	51438	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.250365019 CEST	51438	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.250376940 CEST	443	51438	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.251310110 CEST	51438	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.251313925 CEST	443	51438	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.273824930 CEST	443	51439	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.274604082 CEST	51439	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.274611950 CEST	443	51439	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.275401115 CEST	51439	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.275404930 CEST	443	51439	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.310841084 CEST	443	51435	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.310971975 CEST	443	51435	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.311206102 CEST	51435	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.311297894 CEST	51435	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.311336040 CEST	443	51435	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.311363935 CEST	51435	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.311378956 CEST	443	51435	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.314419985 CEST	51440	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.314438105 CEST	443	51440	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.314527988 CEST	51440	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.314735889 CEST	51440	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.314752102 CEST	443	51440	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.346828938 CEST	443	51436	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.348752022 CEST	443	51436	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.348843098 CEST	51436	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.371944904 CEST	51436	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.371956110 CEST	443	51436	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.371978045 CEST	51436	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.371982098 CEST	443	51436	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.377507925 CEST	51441	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.377557993 CEST	443	51441	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.377768040 CEST	51441	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.377995014 CEST	51441	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.378010035 CEST	443	51441	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.379158020 CEST	443	51438	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.379267931 CEST	443	51438	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.379317999 CEST	51438	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.379426956 CEST	51438	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.379441023 CEST	443	51438	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.379450083 CEST	51438	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.379456043 CEST	443	51438	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.382833958 CEST	51442	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.382850885 CEST	443	51442	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.383080006 CEST	51442	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.383271933 CEST	51442	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.383284092 CEST	443	51442	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.406493902 CEST	443	51439	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.406641006 CEST	443	51439	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.406702042 CEST	51439	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.406932116 CEST	51439	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.406935930 CEST	443	51439	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.406949997 CEST	51439	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.406951904 CEST	443	51439	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.409671068 CEST	51443	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.409691095 CEST	443	51443	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.409782887 CEST	51443	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.409953117 CEST	51443	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.409965992 CEST	443	51443	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.539411068 CEST	443	51437	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.539928913 CEST	443	51437	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.539990902 CEST	51437	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.540190935 CEST	51437	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.540199995 CEST	443	51437	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.540210009 CEST	51437	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.540214062 CEST	443	51437	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.542783976 CEST	51444	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.542860031 CEST	443	51444	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:45.542988062 CEST	51444	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.543087959 CEST	51444	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:45.543119907 CEST	443	51444	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.041332960 CEST	443	51440	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.041764975 CEST	51440	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.041784048 CEST	443	51440	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.042361975 CEST	51440	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.042367935 CEST	443	51440	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.104437113 CEST	443	51441	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.104886055 CEST	51441	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.104911089 CEST	443	51441	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.105328083 CEST	51441	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.105333090 CEST	443	51441	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.140892982 CEST	443	51442	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.141279936 CEST	51442	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.141287088 CEST	443	51442	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.141695023 CEST	51442	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.141699076 CEST	443	51442	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.146651030 CEST	443	51443	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.147025108 CEST	51443	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.147034883 CEST	443	51443	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.147397041 CEST	51443	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.147399902 CEST	443	51443	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.171056986 CEST	443	51440	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.171304941 CEST	443	51440	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.171354055 CEST	51440	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.171386003 CEST	51440	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.171395063 CEST	443	51440	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.171403885 CEST	51440	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.171408892 CEST	443	51440	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.174220085 CEST	51446	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.174258947 CEST	443	51446	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.174339056 CEST	51446	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.174503088 CEST	51446	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.174511909 CEST	443	51446	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.233670950 CEST	443	51441	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.233797073 CEST	443	51441	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.233845949 CEST	51441	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.234148026 CEST	51441	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.234158039 CEST	443	51441	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.237329960 CEST	51447	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.237380028 CEST	443	51447	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.237466097 CEST	51447	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.237649918 CEST	51447	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.237682104 CEST	443	51447	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.271116018 CEST	443	51442	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.271379948 CEST	443	51442	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.271433115 CEST	51442	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.271542072 CEST	51442	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.271548986 CEST	443	51442	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.271573067 CEST	51442	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.271576881 CEST	443	51442	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.273724079 CEST	51448	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.273746014 CEST	443	51448	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.273829937 CEST	51448	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.274209023 CEST	51448	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.274219990 CEST	443	51448	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.275401115 CEST	443	51443	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.275614023 CEST	443	51443	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.275671005 CEST	51443	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.276247025 CEST	51443	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.276252031 CEST	443	51443	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.276259899 CEST	51443	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.276264906 CEST	443	51443	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.281946898 CEST	51449	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.281975031 CEST	443	51449	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.282017946 CEST	443	51444	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.282085896 CEST	51449	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.282529116 CEST	51444	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.282550097 CEST	443	51444	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.283144951 CEST	51444	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.283157110 CEST	443	51444	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.283524990 CEST	51449	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.283538103 CEST	443	51449	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.422940969 CEST	443	51444	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.423088074 CEST	443	51444	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.423235893 CEST	51444	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.435606956 CEST	51444	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.435617924 CEST	443	51444	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.435657978 CEST	51444	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.435664892 CEST	443	51444	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.444089890 CEST	51450	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.444102049 CEST	443	51450	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.444160938 CEST	51450	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.444688082 CEST	51450	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.444700956 CEST	443	51450	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.927706957 CEST	443	51446	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.928703070 CEST	51446	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.928728104 CEST	443	51446	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.930179119 CEST	51446	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.930183887 CEST	443	51446	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.965584993 CEST	443	51447	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.966264963 CEST	51447	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.966321945 CEST	443	51447	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:46.967116117 CEST	51447	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:46.967128992 CEST	443	51447	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.021405935 CEST	443	51448	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.021996975 CEST	51448	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.022008896 CEST	443	51448	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.022547960 CEST	51448	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.022553921 CEST	443	51448	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.059709072 CEST	443	51446	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.059864044 CEST	443	51446	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.059921026 CEST	51446	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.063043118 CEST	51446	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.063057899 CEST	443	51446	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.063071012 CEST	51446	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.063076019 CEST	443	51446	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.071527004 CEST	51451	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.071551085 CEST	443	51451	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.071654081 CEST	51451	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.072288036 CEST	51451	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.072299004 CEST	443	51451	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.095686913 CEST	443	51447	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.095777035 CEST	443	51447	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.095976114 CEST	51447	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.105778933 CEST	51447	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.105813980 CEST	443	51447	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.106046915 CEST	51447	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.106065035 CEST	443	51447	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.111725092 CEST	51452	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.111772060 CEST	443	51452	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.111845970 CEST	51452	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.112313032 CEST	51452	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.112327099 CEST	443	51452	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.157206059 CEST	443	51448	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.157259941 CEST	443	51448	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.157375097 CEST	51448	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.157558918 CEST	51448	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.157571077 CEST	443	51448	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.157582045 CEST	51448	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.157587051 CEST	443	51448	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.164802074 CEST	51453	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.164860964 CEST	443	51453	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.164968967 CEST	51453	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.165430069 CEST	51453	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.165461063 CEST	443	51453	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.185657978 CEST	443	51450	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.186569929 CEST	51450	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.186584949 CEST	443	51450	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.187628031 CEST	51450	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.187633991 CEST	443	51450	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.314711094 CEST	443	51450	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.314954996 CEST	443	51450	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.315016031 CEST	51450	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.315038919 CEST	51450	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.315046072 CEST	443	51450	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.315054893 CEST	51450	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.315063953 CEST	443	51450	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.317187071 CEST	51454	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.317231894 CEST	443	51454	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.317338943 CEST	51454	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.317500114 CEST	51454	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.317531109 CEST	443	51454	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.810877085 CEST	443	51451	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.811495066 CEST	51451	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.811520100 CEST	443	51451	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.812043905 CEST	51451	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.812050104 CEST	443	51451	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.831648111 CEST	443	51452	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.831995964 CEST	51452	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.832019091 CEST	443	51452	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.832389116 CEST	51452	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.832392931 CEST	443	51452	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.895941973 CEST	443	51453	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.896392107 CEST	51453	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.896449089 CEST	443	51453	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.896833897 CEST	51453	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.896847010 CEST	443	51453	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.941437006 CEST	443	51451	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.941610098 CEST	443	51451	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.941709995 CEST	51451	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.941760063 CEST	51451	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.941778898 CEST	443	51451	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.941788912 CEST	51451	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.941796064 CEST	443	51451	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.944349051 CEST	51455	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.944386959 CEST	443	51455	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.944534063 CEST	51455	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.944694996 CEST	51455	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.944706917 CEST	443	51455	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.961507082 CEST	443	51452	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.961615086 CEST	443	51452	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.961664915 CEST	51452	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.961724043 CEST	51452	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.961735010 CEST	443	51452	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.961745977 CEST	51452	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.961750031 CEST	443	51452	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.963861942 CEST	51456	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.963897943 CEST	443	51456	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:47.963965893 CEST	51456	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.964075089 CEST	51456	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:47.964092970 CEST	443	51456	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.024756908 CEST	443	51453	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.024801016 CEST	443	51453	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.024945021 CEST	51453	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.025017023 CEST	51453	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.025017023 CEST	51453	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.025074959 CEST	443	51453	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.025104046 CEST	443	51453	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.026966095 CEST	51457	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.026992083 CEST	443	51457	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.027133942 CEST	51457	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.027208090 CEST	51457	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.027220011 CEST	443	51457	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.071764946 CEST	443	51454	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.072105885 CEST	51454	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.072135925 CEST	443	51454	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.072504044 CEST	51454	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.072516918 CEST	443	51454	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.205378056 CEST	443	51454	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.205602884 CEST	443	51454	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.205674887 CEST	51454	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.205858946 CEST	51454	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.205903053 CEST	443	51454	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.205930948 CEST	51454	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.205945969 CEST	443	51454	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.208570004 CEST	51458	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.208601952 CEST	443	51458	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.208714962 CEST	51458	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.208884001 CEST	51458	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.208895922 CEST	443	51458	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.678683043 CEST	443	51449	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.679194927 CEST	51449	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.679220915 CEST	443	51449	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.679661036 CEST	51449	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.679666042 CEST	443	51449	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.705269098 CEST	49736	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:01:48.705359936 CEST	443	49736	199.36.158.100	192.168.2.4
Oct 21, 2024 11:01:48.705425978 CEST	49736	443	192.168.2.4	199.36.158.100
Oct 21, 2024 11:01:48.804833889 CEST	443	51456	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.806142092 CEST	443	51457	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.807049990 CEST	51456	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.807049990 CEST	51456	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.807066917 CEST	443	51456	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.807090044 CEST	443	51456	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.807286024 CEST	443	51455	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.807322025 CEST	51457	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.807337046 CEST	443	51457	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.807813883 CEST	51457	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.807825089 CEST	443	51457	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.808006048 CEST	51455	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.808021069 CEST	443	51455	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.808497906 CEST	51455	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.808502913 CEST	443	51455	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.810976028 CEST	443	51449	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.811165094 CEST	443	51449	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.811331987 CEST	51449	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.811331987 CEST	51449	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.811351061 CEST	51449	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.811367989 CEST	443	51449	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.814152956 CEST	51459	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.814171076 CEST	443	51459	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.814336061 CEST	51459	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.814419031 CEST	51459	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.814431906 CEST	443	51459	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.936594963 CEST	443	51456	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.936677933 CEST	443	51455	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.936769009 CEST	443	51456	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.936783075 CEST	443	51457	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.936801910 CEST	443	51455	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.936835051 CEST	51456	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.936873913 CEST	51456	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.936875105 CEST	443	51457	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.936878920 CEST	51455	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.936883926 CEST	443	51456	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.936899900 CEST	51456	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.936903954 CEST	443	51456	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.936923027 CEST	51457	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.937038898 CEST	51455	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.937052011 CEST	443	51455	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.937077045 CEST	51455	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.937082052 CEST	443	51455	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.937576056 CEST	51457	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.937592030 CEST	443	51457	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.937618971 CEST	51457	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.937624931 CEST	443	51457	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.940047979 CEST	51461	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.940063953 CEST	443	51461	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.940119028 CEST	51460	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.940186024 CEST	443	51460	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.940211058 CEST	51461	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.940279007 CEST	51460	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.940419912 CEST	51461	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.940431118 CEST	443	51461	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.940737009 CEST	51462	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.940745115 CEST	443	51462	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.940749884 CEST	51460	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.940792084 CEST	443	51460	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.940948009 CEST	51462	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.940948009 CEST	51462	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.940964937 CEST	443	51462	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.961529970 CEST	443	51458	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.961878061 CEST	51458	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.961891890 CEST	443	51458	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:48.962287903 CEST	51458	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:48.962292910 CEST	443	51458	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.093089104 CEST	443	51458	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.093396902 CEST	443	51458	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.093449116 CEST	51458	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.093521118 CEST	51458	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.093521118 CEST	51458	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.093535900 CEST	443	51458	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.093552113 CEST	443	51458	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.095504999 CEST	51463	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.095546961 CEST	443	51463	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.095736027 CEST	51463	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.095736027 CEST	51463	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.095801115 CEST	443	51463	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.571376085 CEST	443	51459	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.571903944 CEST	51459	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.571916103 CEST	443	51459	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.572416067 CEST	51459	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.572421074 CEST	443	51459	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.677747965 CEST	443	51462	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.678512096 CEST	51462	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.678512096 CEST	51462	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.678535938 CEST	443	51462	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.678544998 CEST	443	51462	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.685307026 CEST	443	51460	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.685950994 CEST	51460	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.685950994 CEST	51460	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.686002970 CEST	443	51460	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.686060905 CEST	443	51460	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.686815023 CEST	443	51461	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.687103033 CEST	51461	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.687108994 CEST	443	51461	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.687401056 CEST	51461	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.687405109 CEST	443	51461	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.704108953 CEST	443	51459	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.704312086 CEST	443	51459	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.704467058 CEST	51459	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.704468012 CEST	51459	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.704488993 CEST	51459	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.704494953 CEST	443	51459	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.707088947 CEST	51464	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.707123995 CEST	443	51464	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.707319021 CEST	51464	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.707406998 CEST	51464	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.707420111 CEST	443	51464	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.808042049 CEST	443	51462	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.808106899 CEST	443	51462	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.808336973 CEST	51462	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.808336973 CEST	51462	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.808460951 CEST	51462	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.808473110 CEST	443	51462	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.810508013 CEST	51465	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.810530901 CEST	443	51465	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.810616970 CEST	51465	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.810765028 CEST	51465	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.810779095 CEST	443	51465	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.817195892 CEST	443	51460	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.817239046 CEST	443	51460	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.817404032 CEST	51460	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.817404032 CEST	51460	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.817478895 CEST	51460	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.817512989 CEST	443	51460	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.819345951 CEST	51466	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.819355965 CEST	443	51466	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.819474936 CEST	51466	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.819492102 CEST	443	51461	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.819663048 CEST	443	51461	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.819691896 CEST	51466	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.819705009 CEST	443	51466	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.819766998 CEST	51461	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.819792032 CEST	51461	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.819792032 CEST	51461	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.819797993 CEST	443	51461	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.819801092 CEST	443	51461	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.821716070 CEST	51467	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.821728945 CEST	443	51467	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.821887970 CEST	51467	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.821943998 CEST	51467	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.821952105 CEST	443	51467	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.829358101 CEST	443	51463	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.831322908 CEST	51463	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.831358910 CEST	443	51463	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.831747055 CEST	51463	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.831758022 CEST	443	51463	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.958554983 CEST	443	51463	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.958725929 CEST	443	51463	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.958870888 CEST	51463	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.958975077 CEST	51463	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.958976030 CEST	51463	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.959012032 CEST	443	51463	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.959037066 CEST	443	51463	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.961436033 CEST	51468	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.961472034 CEST	443	51468	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:49.961648941 CEST	51468	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.962829113 CEST	51468	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:49.962842941 CEST	443	51468	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.229954004 CEST	51469	443	192.168.2.4	142.250.186.100
Oct 21, 2024 11:01:50.230037928 CEST	443	51469	142.250.186.100	192.168.2.4
Oct 21, 2024 11:01:50.230153084 CEST	51469	443	192.168.2.4	142.250.186.100
Oct 21, 2024 11:01:50.230433941 CEST	51469	443	192.168.2.4	142.250.186.100
Oct 21, 2024 11:01:50.230473042 CEST	443	51469	142.250.186.100	192.168.2.4
Oct 21, 2024 11:01:50.435173035 CEST	443	51464	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.435841084 CEST	51464	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.435854912 CEST	443	51464	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.436130047 CEST	51464	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.436135054 CEST	443	51464	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.544532061 CEST	443	51465	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.553050041 CEST	51465	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.553065062 CEST	443	51465	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.555847883 CEST	51465	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.555854082 CEST	443	51465	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.558790922 CEST	443	51467	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.559828997 CEST	51467	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.559828997 CEST	51467	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.559851885 CEST	443	51467	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.559864998 CEST	443	51467	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.564284086 CEST	443	51464	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.564596891 CEST	443	51464	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.564650059 CEST	51464	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.564713001 CEST	51464	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.564713001 CEST	51464	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.564724922 CEST	443	51464	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.564732075 CEST	443	51464	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.567697048 CEST	51470	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.567745924 CEST	443	51470	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.567882061 CEST	51470	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.567996025 CEST	51470	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.568015099 CEST	443	51470	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.681863070 CEST	443	51465	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.682547092 CEST	443	51465	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.682625055 CEST	51465	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.682625055 CEST	51465	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.682718992 CEST	51465	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.682727098 CEST	443	51465	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.685151100 CEST	51471	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.685193062 CEST	443	51471	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.685301065 CEST	51471	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.685432911 CEST	51471	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.685445070 CEST	443	51471	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.690043926 CEST	443	51467	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.690650940 CEST	443	51467	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.690726042 CEST	51467	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.690726042 CEST	51467	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.690785885 CEST	51467	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.690790892 CEST	443	51467	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.693403959 CEST	51472	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.693484068 CEST	443	51472	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.693685055 CEST	51472	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.693685055 CEST	51472	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.693698883 CEST	443	51468	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.693758965 CEST	443	51472	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.694663048 CEST	51468	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.694663048 CEST	51468	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.694672108 CEST	443	51468	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.694684029 CEST	443	51468	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.822326899 CEST	443	51468	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.822424889 CEST	443	51468	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.822688103 CEST	51468	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.822743893 CEST	51468	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.822743893 CEST	51468	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.822757006 CEST	443	51468	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.822763920 CEST	443	51468	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.825725079 CEST	51473	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.825818062 CEST	443	51473	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:50.828080893 CEST	51473	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.828452110 CEST	51473	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:50.828485966 CEST	443	51473	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.083245039 CEST	443	51469	142.250.186.100	192.168.2.4
Oct 21, 2024 11:01:51.083848953 CEST	51469	443	192.168.2.4	142.250.186.100
Oct 21, 2024 11:01:51.083880901 CEST	443	51469	142.250.186.100	192.168.2.4
Oct 21, 2024 11:01:51.084973097 CEST	443	51469	142.250.186.100	192.168.2.4
Oct 21, 2024 11:01:51.086875916 CEST	51469	443	192.168.2.4	142.250.186.100
Oct 21, 2024 11:01:51.087054014 CEST	443	51469	142.250.186.100	192.168.2.4
Oct 21, 2024 11:01:51.137696981 CEST	51469	443	192.168.2.4	142.250.186.100
Oct 21, 2024 11:01:51.296130896 CEST	443	51470	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.296926975 CEST	51470	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.296948910 CEST	443	51470	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.297734022 CEST	51470	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.297745943 CEST	443	51470	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.421415091 CEST	443	51472	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.422087908 CEST	51472	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.422102928 CEST	443	51472	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.422816038 CEST	51472	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.422821045 CEST	443	51472	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.423001051 CEST	443	51466	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.424269915 CEST	51466	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.424283028 CEST	443	51466	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.426932096 CEST	51466	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.426937103 CEST	443	51466	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.427006960 CEST	443	51470	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.427428961 CEST	443	51470	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.427769899 CEST	51470	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.427849054 CEST	51470	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.427849054 CEST	51470	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.427892923 CEST	443	51470	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.427920103 CEST	443	51470	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.430922031 CEST	51474	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.430969000 CEST	443	51474	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.431113958 CEST	51474	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.431334972 CEST	51474	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.431364059 CEST	443	51474	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.432524920 CEST	443	51471	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.433119059 CEST	51471	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.433142900 CEST	443	51471	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.435844898 CEST	51471	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.435851097 CEST	443	51471	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.550695896 CEST	443	51472	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.552354097 CEST	443	51472	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.552581072 CEST	51472	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.562357903 CEST	443	51466	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.562546015 CEST	443	51466	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.564932108 CEST	51466	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.571362019 CEST	51472	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.571377039 CEST	443	51472	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.571408987 CEST	51472	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.571415901 CEST	443	51472	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.573273897 CEST	51466	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.573273897 CEST	51466	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.573287964 CEST	443	51466	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.573297024 CEST	443	51466	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.573452950 CEST	443	51471	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.573787928 CEST	443	51471	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.574101925 CEST	51471	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.575020075 CEST	51471	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.575020075 CEST	51471	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.575037956 CEST	443	51471	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.575046062 CEST	443	51471	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.579329014 CEST	443	51473	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.582834959 CEST	51475	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.582854986 CEST	443	51475	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.583087921 CEST	51476	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.583132029 CEST	443	51476	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.583161116 CEST	51475	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.583256960 CEST	51476	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.584820032 CEST	51473	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.584820032 CEST	51473	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.584846973 CEST	443	51473	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.584881067 CEST	443	51473	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.585235119 CEST	51475	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.585247040 CEST	443	51475	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.585498095 CEST	51476	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.585510015 CEST	443	51476	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.586596012 CEST	51477	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.586616039 CEST	443	51477	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.588972092 CEST	51477	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.589226007 CEST	51477	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.589241028 CEST	443	51477	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.713795900 CEST	443	51473	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.713927984 CEST	443	51473	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.715914965 CEST	51473	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.715975046 CEST	51473	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.715975046 CEST	51473	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.715998888 CEST	443	51473	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.716039896 CEST	443	51473	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.719800949 CEST	51478	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.719810009 CEST	443	51478	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:51.719926119 CEST	51478	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.724841118 CEST	51478	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:51.724853039 CEST	443	51478	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.482592106 CEST	443	51477	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.485759020 CEST	443	51476	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.485884905 CEST	443	51474	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.486016989 CEST	443	51475	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.488768101 CEST	443	51478	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.516155005 CEST	51478	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.516172886 CEST	443	51478	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.517721891 CEST	51478	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.517726898 CEST	443	51478	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.518663883 CEST	51475	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.518680096 CEST	443	51475	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.519975901 CEST	51475	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.519980907 CEST	443	51475	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.520656109 CEST	51477	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.520663023 CEST	443	51477	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.522125006 CEST	51477	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.522130013 CEST	443	51477	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.528296947 CEST	51476	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.528537989 CEST	51474	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.552809954 CEST	51476	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.552819967 CEST	443	51476	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.554184914 CEST	51476	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.554191113 CEST	443	51476	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.555180073 CEST	51474	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.555207014 CEST	443	51474	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.556834936 CEST	51474	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.556848049 CEST	443	51474	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.603219032 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 21, 2024 11:01:52.608557940 CEST	80	49724	199.232.214.172	192.168.2.4
Oct 21, 2024 11:01:52.608629942 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 21, 2024 11:01:52.649399996 CEST	443	51477	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.649677992 CEST	443	51477	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.649724007 CEST	51477	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.649921894 CEST	443	51478	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.650059938 CEST	443	51478	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.650110006 CEST	51478	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.654063940 CEST	443	51475	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.654278994 CEST	443	51475	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.654323101 CEST	51475	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.683847904 CEST	443	51476	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.683989048 CEST	443	51476	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.684031010 CEST	51476	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.686544895 CEST	443	51474	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.686604977 CEST	443	51474	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.686661959 CEST	51474	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.705302000 CEST	51477	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.705313921 CEST	443	51477	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.705322981 CEST	51477	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.705328941 CEST	443	51477	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.749568939 CEST	51476	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.749589920 CEST	443	51476	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.749600887 CEST	51476	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.749607086 CEST	443	51476	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.751164913 CEST	51474	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.751199007 CEST	443	51474	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.751235962 CEST	51474	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.751254082 CEST	443	51474	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.751555920 CEST	51478	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.751559973 CEST	443	51478	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.751583099 CEST	51478	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.751586914 CEST	443	51478	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.753715992 CEST	51475	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.753730059 CEST	443	51475	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.753740072 CEST	51475	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.753746033 CEST	443	51475	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.895345926 CEST	51479	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.895371914 CEST	443	51479	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.895468950 CEST	51479	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.899029016 CEST	51479	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.899044037 CEST	443	51479	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.902718067 CEST	51481	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.902733088 CEST	51480	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.902748108 CEST	443	51481	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.902786970 CEST	443	51480	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.902853966 CEST	51481	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.902858019 CEST	51480	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.904184103 CEST	51481	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.904195070 CEST	443	51481	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.933425903 CEST	51482	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.933464050 CEST	443	51482	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.936850071 CEST	51483	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.936880112 CEST	443	51483	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.936893940 CEST	51482	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.937196970 CEST	51483	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.949237108 CEST	51480	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.949275017 CEST	443	51480	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.949932098 CEST	51482	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.949954987 CEST	443	51482	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:52.950347900 CEST	51483	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:52.950386047 CEST	443	51483	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.639735937 CEST	443	51481	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.640279055 CEST	51481	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.640299082 CEST	443	51481	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.640912056 CEST	51481	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.640917063 CEST	443	51481	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.660887003 CEST	443	51479	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.661739111 CEST	51479	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.661739111 CEST	51479	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.661753893 CEST	443	51479	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.661767006 CEST	443	51479	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.684648991 CEST	443	51483	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.685483932 CEST	51483	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.685538054 CEST	443	51483	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.685947895 CEST	51483	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.685965061 CEST	443	51483	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.686306000 CEST	443	51480	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.687499046 CEST	51480	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.687499046 CEST	51480	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.687522888 CEST	443	51480	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.687551975 CEST	443	51480	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.691976070 CEST	443	51482	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.692625999 CEST	51482	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.692640066 CEST	443	51482	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.693293095 CEST	51482	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.693296909 CEST	443	51482	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.792047024 CEST	443	51481	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.792363882 CEST	443	51481	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.792601109 CEST	51481	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.792804956 CEST	51481	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.792818069 CEST	443	51481	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.796340942 CEST	51484	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.796367884 CEST	443	51484	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.796458960 CEST	51484	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.796906948 CEST	51484	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.796921015 CEST	443	51484	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.798249960 CEST	443	51479	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.798439980 CEST	443	51479	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.798569918 CEST	51479	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.798700094 CEST	51479	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.798700094 CEST	51479	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.798716068 CEST	443	51479	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.798723936 CEST	443	51479	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.803777933 CEST	51485	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.803822994 CEST	443	51485	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.803951025 CEST	51485	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.804224014 CEST	51485	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.804239988 CEST	443	51485	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.814184904 CEST	443	51483	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.814631939 CEST	443	51483	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.815026045 CEST	51483	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.815078974 CEST	51483	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.815078974 CEST	51483	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.815110922 CEST	443	51483	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.815134048 CEST	443	51483	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.816629887 CEST	443	51480	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.816900015 CEST	443	51480	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.816962004 CEST	51480	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.817857981 CEST	51480	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.817876101 CEST	443	51480	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.817898035 CEST	51480	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.817910910 CEST	443	51480	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.822482109 CEST	51486	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.822495937 CEST	443	51486	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.822705030 CEST	51486	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.822722912 CEST	443	51482	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.822930098 CEST	51486	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.822942972 CEST	443	51486	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.823091030 CEST	443	51482	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.823159933 CEST	51482	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.823538065 CEST	51482	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.823548079 CEST	443	51482	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.823580027 CEST	51482	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.823585033 CEST	443	51482	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.826858044 CEST	51487	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.826868057 CEST	443	51487	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.827013969 CEST	51487	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.827336073 CEST	51487	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.827347040 CEST	443	51487	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.830956936 CEST	51488	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.830964088 CEST	443	51488	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:53.831020117 CEST	51488	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.831307888 CEST	51488	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:53.831319094 CEST	443	51488	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.536292076 CEST	443	51485	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.537946939 CEST	51485	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.537965059 CEST	443	51485	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.539495945 CEST	51485	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.539500952 CEST	443	51485	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.552010059 CEST	443	51484	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.552427053 CEST	51484	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.552450895 CEST	443	51484	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.553258896 CEST	51484	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.553265095 CEST	443	51484	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.569053888 CEST	443	51488	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.569650888 CEST	51488	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.569659948 CEST	443	51488	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.570544004 CEST	51488	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.570553064 CEST	443	51488	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.573956966 CEST	443	51486	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.574569941 CEST	51486	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.574583054 CEST	443	51486	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.576248884 CEST	51486	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.576255083 CEST	443	51486	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.577996969 CEST	443	51487	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.578366995 CEST	51487	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.578373909 CEST	443	51487	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.579308033 CEST	51487	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.579312086 CEST	443	51487	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.669778109 CEST	443	51485	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.669964075 CEST	443	51485	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.670031071 CEST	51485	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.675736904 CEST	51485	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.675760031 CEST	443	51485	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.684715986 CEST	51489	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.684745073 CEST	443	51489	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.684849024 CEST	51489	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.686444044 CEST	51489	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.686456919 CEST	443	51489	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.686831951 CEST	443	51484	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.686969042 CEST	443	51484	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.687016010 CEST	51484	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.687666893 CEST	51484	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.687678099 CEST	443	51484	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.687719107 CEST	51484	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.687724113 CEST	443	51484	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.692749977 CEST	51490	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.692760944 CEST	443	51490	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.692998886 CEST	51490	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.693190098 CEST	51490	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.693202019 CEST	443	51490	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.700465918 CEST	443	51488	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.700512886 CEST	443	51488	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.700686932 CEST	51488	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.701143980 CEST	51488	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.701148033 CEST	443	51488	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.706947088 CEST	443	51486	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.707372904 CEST	443	51486	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.707437038 CEST	51486	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.707572937 CEST	51486	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.707580090 CEST	443	51486	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.707639933 CEST	51486	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.707652092 CEST	443	51486	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.711224079 CEST	443	51487	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.711283922 CEST	443	51487	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.711535931 CEST	51487	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.711699963 CEST	51487	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.711704016 CEST	443	51487	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.711725950 CEST	51487	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.711730003 CEST	443	51487	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.722815037 CEST	51491	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.722830057 CEST	443	51491	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.722898960 CEST	51491	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.723334074 CEST	51491	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.723345995 CEST	443	51491	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.725348949 CEST	51492	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.725415945 CEST	443	51492	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.725486994 CEST	51492	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.727327108 CEST	51492	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.727361917 CEST	443	51492	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.727688074 CEST	51493	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.727713108 CEST	443	51493	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:54.727761030 CEST	51493	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.728100061 CEST	51493	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:54.728111029 CEST	443	51493	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.430874109 CEST	443	51489	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.431379080 CEST	51489	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.431415081 CEST	443	51489	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.431998968 CEST	51489	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.432005882 CEST	443	51489	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.446506977 CEST	443	51490	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.446899891 CEST	51490	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.446909904 CEST	443	51490	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.447431087 CEST	51490	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.447436094 CEST	443	51490	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.447838068 CEST	443	51492	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.448224068 CEST	51492	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.448247910 CEST	443	51492	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.448668003 CEST	51492	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.448674917 CEST	443	51492	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.458030939 CEST	443	51491	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.458398104 CEST	51491	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.458410978 CEST	443	51491	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.458921909 CEST	51491	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.458928108 CEST	443	51491	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.474502087 CEST	443	51493	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.474858046 CEST	51493	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.474879026 CEST	443	51493	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.475351095 CEST	51493	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.475354910 CEST	443	51493	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.562521935 CEST	443	51489	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.562824965 CEST	443	51489	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.562872887 CEST	51489	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.562913895 CEST	51489	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.562935114 CEST	443	51489	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.562949896 CEST	51489	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.562958002 CEST	443	51489	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.565843105 CEST	51495	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.565888882 CEST	443	51495	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.565984011 CEST	51495	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.566112041 CEST	51495	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.566138983 CEST	443	51495	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.575614929 CEST	443	51492	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.575752020 CEST	443	51492	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.575807095 CEST	51492	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.575844049 CEST	51492	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.575867891 CEST	443	51492	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.575891972 CEST	51492	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.575903893 CEST	443	51492	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.577967882 CEST	51496	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.577994108 CEST	443	51496	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.578084946 CEST	51496	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.578217983 CEST	51496	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.578233004 CEST	443	51496	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.579660892 CEST	443	51490	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.579886913 CEST	443	51490	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.580004930 CEST	51490	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.580044985 CEST	51490	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.580049992 CEST	443	51490	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.580089092 CEST	51490	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.580092907 CEST	443	51490	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.582267046 CEST	51497	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.582288027 CEST	443	51497	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.582390070 CEST	51497	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.582523108 CEST	51497	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.582535982 CEST	443	51497	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.588917017 CEST	443	51491	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.589051008 CEST	443	51491	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.589123011 CEST	51491	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.589153051 CEST	51491	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.589160919 CEST	443	51491	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.589174032 CEST	51491	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.589178085 CEST	443	51491	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.591458082 CEST	51498	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.591465950 CEST	443	51498	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.591517925 CEST	51498	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.591645956 CEST	51498	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.591658115 CEST	443	51498	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.607278109 CEST	443	51493	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.607321024 CEST	443	51493	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.607450962 CEST	51493	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.607474089 CEST	51493	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.607490063 CEST	443	51493	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.607502937 CEST	51493	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.607508898 CEST	443	51493	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.609724045 CEST	51499	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.609734058 CEST	443	51499	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:55.609807968 CEST	51499	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.609957933 CEST	51499	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:55.609966993 CEST	443	51499	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.294892073 CEST	443	51495	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.295452118 CEST	51495	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.295500994 CEST	443	51495	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.295922041 CEST	51495	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.295938015 CEST	443	51495	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.309142113 CEST	443	51496	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.309643030 CEST	51496	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.309652090 CEST	443	51496	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.310025930 CEST	51496	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.310029984 CEST	443	51496	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.319158077 CEST	443	51497	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.319680929 CEST	51497	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.319693089 CEST	443	51497	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.319978952 CEST	51497	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.319983959 CEST	443	51497	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.342457056 CEST	443	51498	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.342967987 CEST	51498	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.342982054 CEST	443	51498	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.343308926 CEST	51498	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.343313932 CEST	443	51498	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.359045029 CEST	443	51499	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.366076946 CEST	51499	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.366094112 CEST	443	51499	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.366518974 CEST	51499	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.366525888 CEST	443	51499	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.424204111 CEST	443	51495	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.424262047 CEST	443	51495	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.424532890 CEST	51495	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.424532890 CEST	51495	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.424592018 CEST	51495	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.424613953 CEST	443	51495	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.427167892 CEST	51501	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.427269936 CEST	443	51501	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.427475929 CEST	51501	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.427475929 CEST	51501	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.427565098 CEST	443	51501	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.448920965 CEST	443	51497	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.449064016 CEST	443	51497	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.449306965 CEST	51497	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.449306965 CEST	51497	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.449496984 CEST	51497	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.449503899 CEST	443	51497	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.451334953 CEST	51502	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.451369047 CEST	443	51502	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.451559067 CEST	51502	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.451612949 CEST	51502	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.451626062 CEST	443	51502	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.475893021 CEST	443	51498	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.475904942 CEST	443	51498	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.475950956 CEST	443	51498	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.475959063 CEST	51498	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.476176023 CEST	51498	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.476176023 CEST	51498	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.476187944 CEST	51498	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.476192951 CEST	443	51498	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.478673935 CEST	51503	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.478749990 CEST	443	51503	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.478909969 CEST	51503	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.478971004 CEST	51503	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.478991032 CEST	443	51503	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.496912956 CEST	443	51499	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.497083902 CEST	443	51499	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.497226954 CEST	51499	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.497226954 CEST	51499	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.497255087 CEST	51499	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.497275114 CEST	443	51499	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.499191046 CEST	51504	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.499216080 CEST	443	51504	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.499628067 CEST	51504	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.499628067 CEST	51504	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.499654055 CEST	443	51504	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.644479990 CEST	443	51496	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.644617081 CEST	443	51496	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.644715071 CEST	51496	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.644715071 CEST	51496	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.644857883 CEST	51496	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.644874096 CEST	443	51496	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.646706104 CEST	51505	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.646749973 CEST	443	51505	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:56.646950006 CEST	51505	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.647102118 CEST	51505	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:56.647125959 CEST	443	51505	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.165460110 CEST	443	51501	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.166536093 CEST	51501	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.166537046 CEST	51501	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.166589975 CEST	443	51501	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.166634083 CEST	443	51501	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.202121973 CEST	443	51502	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.202819109 CEST	51502	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.202819109 CEST	51502	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.202830076 CEST	443	51502	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.202847958 CEST	443	51502	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.220192909 CEST	443	51503	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.220859051 CEST	51503	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.220905066 CEST	443	51503	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.220952034 CEST	51503	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.220966101 CEST	443	51503	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.248712063 CEST	443	51504	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.249356031 CEST	51504	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.249356031 CEST	51504	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.249372959 CEST	443	51504	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.249386072 CEST	443	51504	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.298069000 CEST	443	51501	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.298182011 CEST	443	51501	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.298358917 CEST	51501	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.298358917 CEST	51501	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.298459053 CEST	51501	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.298487902 CEST	443	51501	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.300929070 CEST	51506	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.300971985 CEST	443	51506	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.301132917 CEST	51506	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.301251888 CEST	51506	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.301280022 CEST	443	51506	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.333801985 CEST	443	51502	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.333865881 CEST	443	51502	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.333975077 CEST	443	51502	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.334072113 CEST	51502	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.334110022 CEST	51502	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.334110022 CEST	51502	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.334126949 CEST	443	51502	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.334151983 CEST	443	51502	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.336198092 CEST	51507	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.336220980 CEST	443	51507	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.336371899 CEST	51507	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.336441994 CEST	51507	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.336450100 CEST	443	51507	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.354067087 CEST	443	51503	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.354083061 CEST	443	51503	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.354120970 CEST	443	51503	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.354152918 CEST	51503	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.354271889 CEST	51503	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.354271889 CEST	51503	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.354412079 CEST	51503	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.354439974 CEST	443	51503	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.356230974 CEST	51508	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.356259108 CEST	443	51508	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.356374979 CEST	51508	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.358870029 CEST	51508	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.358884096 CEST	443	51508	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.381386042 CEST	443	51504	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.381406069 CEST	443	51504	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.381520033 CEST	51504	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.381532907 CEST	443	51504	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.381683111 CEST	51504	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.381690979 CEST	443	51504	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.381716967 CEST	51504	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.381742001 CEST	443	51505	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.381815910 CEST	443	51504	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.381848097 CEST	443	51504	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.381899118 CEST	51504	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.382797003 CEST	51505	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.382814884 CEST	443	51505	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.384473085 CEST	51509	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.384476900 CEST	51505	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.384488106 CEST	443	51505	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.384558916 CEST	443	51509	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.388926029 CEST	51509	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.391863108 CEST	51509	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.391875029 CEST	443	51509	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.512775898 CEST	443	51505	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.512948990 CEST	443	51505	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.513166904 CEST	51505	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.513166904 CEST	51505	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.513314009 CEST	51505	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.513334990 CEST	443	51505	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.515489101 CEST	51510	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.515501022 CEST	443	51510	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:57.515626907 CEST	51510	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.515685081 CEST	51510	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:57.515691996 CEST	443	51510	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.149014950 CEST	443	51506	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.150068045 CEST	51506	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.150068998 CEST	51506	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.150095940 CEST	443	51506	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.150130987 CEST	443	51506	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.276020050 CEST	443	51509	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.276762009 CEST	51509	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.276762009 CEST	51509	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.276776075 CEST	443	51509	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.276791096 CEST	443	51509	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.278857946 CEST	443	51510	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.278881073 CEST	443	51508	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.279303074 CEST	51508	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.279329062 CEST	443	51508	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.279352903 CEST	51510	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.279360056 CEST	443	51510	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.279589891 CEST	51510	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.279594898 CEST	443	51510	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.279916048 CEST	443	51507	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.280004978 CEST	51508	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.280011892 CEST	443	51508	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.280261040 CEST	51507	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.280277967 CEST	443	51507	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.280628920 CEST	51507	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.280632973 CEST	443	51507	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.285342932 CEST	443	51506	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.285392046 CEST	443	51506	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.285615921 CEST	51506	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.285615921 CEST	51506	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.285615921 CEST	51506	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.288156033 CEST	51511	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.288178921 CEST	443	51511	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.288338900 CEST	51511	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.288434982 CEST	51511	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.288444996 CEST	443	51511	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.404874086 CEST	443	51509	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.404922009 CEST	443	51509	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.405072927 CEST	51509	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.405072927 CEST	51509	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.405158997 CEST	51509	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.405168056 CEST	443	51509	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.405566931 CEST	443	51510	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.405702114 CEST	443	51510	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.405781031 CEST	51510	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.405910969 CEST	51510	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.405910969 CEST	51510	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.405916929 CEST	443	51510	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.405924082 CEST	443	51510	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.406302929 CEST	443	51507	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.406470060 CEST	443	51507	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.406533003 CEST	51507	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.406795979 CEST	51507	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.406795979 CEST	51507	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.406810045 CEST	443	51507	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.406814098 CEST	443	51507	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.408600092 CEST	51512	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.408643007 CEST	443	51512	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.408847094 CEST	51513	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.408873081 CEST	51512	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.408907890 CEST	443	51513	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.408987999 CEST	51513	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.409166098 CEST	51512	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.409188986 CEST	443	51512	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.409296989 CEST	51513	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.409318924 CEST	443	51513	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.410590887 CEST	443	51508	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.410628080 CEST	51514	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.410634041 CEST	443	51508	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.410660028 CEST	443	51514	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.410701036 CEST	51508	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.410784960 CEST	51514	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.411020041 CEST	51508	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.411020041 CEST	51508	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.411036968 CEST	443	51508	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.411046028 CEST	443	51508	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.411264896 CEST	51514	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.411289930 CEST	443	51514	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.413702011 CEST	51515	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.413712978 CEST	443	51515	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.413873911 CEST	51515	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.415060043 CEST	51515	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.415074110 CEST	443	51515	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:58.589821100 CEST	51506	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:58.589847088 CEST	443	51506	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.032298088 CEST	443	51511	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.032896042 CEST	51511	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.032915115 CEST	443	51511	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.033675909 CEST	51511	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.033685923 CEST	443	51511	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.143968105 CEST	443	51513	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.145426989 CEST	51513	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.145447016 CEST	443	51513	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.146574020 CEST	51513	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.146579027 CEST	443	51513	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.151720047 CEST	443	51515	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.156600952 CEST	51515	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.156632900 CEST	443	51515	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.157128096 CEST	51515	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.157141924 CEST	443	51515	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.157963991 CEST	443	51512	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.159173965 CEST	51512	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.159189939 CEST	443	51512	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.163639069 CEST	51512	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.163651943 CEST	443	51512	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.168157101 CEST	443	51511	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.168205976 CEST	443	51511	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.168317080 CEST	51511	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.169399977 CEST	51511	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.169413090 CEST	443	51511	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.170720100 CEST	443	51514	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.201553106 CEST	51514	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.201565981 CEST	443	51514	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.213114023 CEST	51514	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.213119030 CEST	443	51514	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.282427073 CEST	443	51515	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.282453060 CEST	443	51513	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.282491922 CEST	443	51515	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.282516956 CEST	443	51513	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.282566071 CEST	51513	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.282579899 CEST	443	51515	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.282573938 CEST	51515	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.282633066 CEST	51515	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.284710884 CEST	51515	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.284739971 CEST	443	51515	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.284765005 CEST	51515	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.284780979 CEST	443	51515	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.287348032 CEST	51513	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.287363052 CEST	443	51513	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.290314913 CEST	51516	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.290347099 CEST	443	51516	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.290416956 CEST	51516	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.291093111 CEST	443	51512	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.291228056 CEST	443	51512	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.291332006 CEST	51512	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.292416096 CEST	51516	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.292427063 CEST	443	51516	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.293374062 CEST	51512	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.293374062 CEST	51512	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.293391943 CEST	443	51512	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.293411970 CEST	443	51512	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.296963930 CEST	51517	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.296992064 CEST	443	51517	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.297046900 CEST	51517	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.297388077 CEST	51517	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.297400951 CEST	443	51517	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.301158905 CEST	51518	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.301167965 CEST	443	51518	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.301229000 CEST	51518	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.302947044 CEST	51519	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.302954912 CEST	443	51519	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.303056955 CEST	51519	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.303494930 CEST	51519	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.303505898 CEST	443	51519	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.304230928 CEST	51518	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.304240942 CEST	443	51518	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.341542006 CEST	443	51514	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.341590881 CEST	443	51514	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.341813087 CEST	51514	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.342389107 CEST	51514	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.342401028 CEST	443	51514	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.349180937 CEST	51520	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.349216938 CEST	443	51520	13.107.246.45	192.168.2.4
Oct 21, 2024 11:01:59.349282980 CEST	51520	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.349725008 CEST	51520	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:01:59.349754095 CEST	443	51520	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.022068977 CEST	443	51516	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.023117065 CEST	51516	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.023130894 CEST	443	51516	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.024287939 CEST	51516	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.024292946 CEST	443	51516	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.037425041 CEST	443	51517	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.038049936 CEST	51517	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.038062096 CEST	443	51517	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.039103985 CEST	51517	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.039108992 CEST	443	51517	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.040456057 CEST	443	51518	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.041007042 CEST	51518	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.041017056 CEST	443	51518	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.041835070 CEST	51518	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.041838884 CEST	443	51518	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.061767101 CEST	443	51519	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.062407970 CEST	51519	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.062416077 CEST	443	51519	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.063334942 CEST	51519	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.063339949 CEST	443	51519	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.074666023 CEST	443	51520	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.075133085 CEST	51520	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.075171947 CEST	443	51520	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.076072931 CEST	51520	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.076091051 CEST	443	51520	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.152648926 CEST	443	51516	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.152710915 CEST	443	51516	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.152955055 CEST	51516	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.153346062 CEST	51516	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.153352976 CEST	443	51516	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.153456926 CEST	51516	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.153461933 CEST	443	51516	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.159190893 CEST	51521	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.159303904 CEST	443	51521	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.159478903 CEST	51521	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.159728050 CEST	51521	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.159761906 CEST	443	51521	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.167686939 CEST	443	51517	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.167846918 CEST	443	51517	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.167891979 CEST	51517	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.167979002 CEST	51517	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.167994022 CEST	443	51517	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.168001890 CEST	51517	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.168008089 CEST	443	51517	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.171514988 CEST	443	51518	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.171524048 CEST	51522	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.171554089 CEST	443	51522	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.171576023 CEST	443	51518	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.171622038 CEST	443	51518	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.171638012 CEST	51522	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.171667099 CEST	51518	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.171875000 CEST	51522	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.171895027 CEST	443	51522	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.172380924 CEST	51518	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.172388077 CEST	443	51518	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.172403097 CEST	51518	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.172406912 CEST	443	51518	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.176162004 CEST	51523	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.176254988 CEST	443	51523	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.176363945 CEST	51523	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.176536083 CEST	51523	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.176570892 CEST	443	51523	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.195369959 CEST	443	51519	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.195547104 CEST	443	51519	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.195605993 CEST	51519	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.195764065 CEST	51519	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.195768118 CEST	443	51519	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.195823908 CEST	51519	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.195828915 CEST	443	51519	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.198452950 CEST	51524	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.198463917 CEST	443	51524	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.198517084 CEST	51524	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.198906898 CEST	51524	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.198920012 CEST	443	51524	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.204281092 CEST	443	51520	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.204369068 CEST	443	51520	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.204569101 CEST	51520	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.204780102 CEST	51520	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.204780102 CEST	51520	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.204807043 CEST	443	51520	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.204833031 CEST	443	51520	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.207828045 CEST	51525	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.207853079 CEST	443	51525	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.208098888 CEST	51525	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.208292961 CEST	51525	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.208304882 CEST	443	51525	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.905925035 CEST	443	51523	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.906481981 CEST	51523	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.906521082 CEST	443	51523	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.907040119 CEST	51523	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.907052994 CEST	443	51523	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.912514925 CEST	443	51522	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.912842989 CEST	51522	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.912874937 CEST	443	51522	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.913341999 CEST	51522	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.913357019 CEST	443	51522	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.915483952 CEST	443	51521	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.915812969 CEST	51521	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.915827990 CEST	443	51521	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.916177034 CEST	51521	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.916187048 CEST	443	51521	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.936558008 CEST	443	51524	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.936882973 CEST	51524	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.936897039 CEST	443	51524	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.937350988 CEST	51524	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.937360048 CEST	443	51524	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.955806017 CEST	443	51525	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.956130028 CEST	51525	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.956140995 CEST	443	51525	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:00.956562042 CEST	51525	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:00.956567049 CEST	443	51525	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.036174059 CEST	443	51523	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.036231995 CEST	443	51523	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.036287069 CEST	51523	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.036431074 CEST	51523	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.036431074 CEST	51523	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.036465883 CEST	443	51523	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.036489010 CEST	443	51523	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.039359093 CEST	51526	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.039387941 CEST	443	51526	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.039453030 CEST	51526	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.039558887 CEST	51526	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.039568901 CEST	443	51526	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.039994001 CEST	443	51522	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.040144920 CEST	443	51522	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.040206909 CEST	51522	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.040258884 CEST	51522	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.040258884 CEST	51522	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.040287018 CEST	443	51522	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.040308952 CEST	443	51522	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.042428970 CEST	51527	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.042443991 CEST	443	51527	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.042503119 CEST	51527	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.042635918 CEST	51527	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.042649031 CEST	443	51527	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.047828913 CEST	443	51521	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.047853947 CEST	443	51521	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.047888041 CEST	443	51521	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.047897100 CEST	51521	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.047940016 CEST	51521	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.048089027 CEST	51521	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.048089981 CEST	51521	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.048104048 CEST	443	51521	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.048122883 CEST	443	51521	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.050132990 CEST	51528	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.050156116 CEST	443	51528	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.050214052 CEST	51528	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.050399065 CEST	51528	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.050410986 CEST	443	51528	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.065112114 CEST	443	51524	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.065273046 CEST	443	51524	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.065327883 CEST	51524	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.065366030 CEST	51524	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.065371037 CEST	443	51524	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.067441940 CEST	51529	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.067519903 CEST	443	51529	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.067584991 CEST	51529	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.067728043 CEST	51529	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.067761898 CEST	443	51529	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.088653088 CEST	443	51469	142.250.186.100	192.168.2.4
Oct 21, 2024 11:02:01.088808060 CEST	443	51469	142.250.186.100	192.168.2.4
Oct 21, 2024 11:02:01.088871956 CEST	51469	443	192.168.2.4	142.250.186.100
Oct 21, 2024 11:02:01.089793921 CEST	443	51525	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.089823008 CEST	443	51525	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.089862108 CEST	443	51525	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.089864016 CEST	51525	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.089910030 CEST	51525	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.090045929 CEST	51525	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.090054035 CEST	443	51525	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.090064049 CEST	51525	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.090070963 CEST	443	51525	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.092192888 CEST	51530	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.092227936 CEST	443	51530	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.092307091 CEST	51530	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.092422962 CEST	51530	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.092452049 CEST	443	51530	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.774995089 CEST	443	51528	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.775995970 CEST	51528	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.776020050 CEST	443	51528	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.777167082 CEST	51528	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.777175903 CEST	443	51528	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.790832043 CEST	443	51529	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.791909933 CEST	443	51526	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.791954041 CEST	51529	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.792022943 CEST	443	51529	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.792063951 CEST	51529	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.792078018 CEST	443	51529	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.792406082 CEST	51526	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.792423010 CEST	443	51526	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.793045998 CEST	51526	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.793056965 CEST	443	51526	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.805187941 CEST	443	51527	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.805829048 CEST	51527	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.805845022 CEST	443	51527	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.807419062 CEST	51527	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.807424068 CEST	443	51527	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.820023060 CEST	443	51530	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.820534945 CEST	51530	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.820569038 CEST	443	51530	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.821142912 CEST	51530	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.821154118 CEST	443	51530	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.904987097 CEST	443	51528	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.905200958 CEST	443	51528	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.905462027 CEST	51528	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.905728102 CEST	51528	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.905728102 CEST	51528	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.905745029 CEST	443	51528	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.905754089 CEST	443	51528	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.909169912 CEST	51531	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.909188986 CEST	443	51531	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.909353018 CEST	51531	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.909584999 CEST	51531	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.909595966 CEST	443	51531	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.918404102 CEST	443	51529	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.918538094 CEST	443	51529	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.919478893 CEST	51529	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.919478893 CEST	51529	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.919689894 CEST	51529	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.919713974 CEST	443	51529	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.922409058 CEST	51532	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.922442913 CEST	443	51532	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.923136950 CEST	51532	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.923393965 CEST	51532	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.923403025 CEST	443	51532	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.924864054 CEST	443	51526	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.925103903 CEST	443	51526	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.925234079 CEST	51526	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.925395966 CEST	51526	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.925395966 CEST	51526	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.925407887 CEST	443	51526	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.925419092 CEST	443	51526	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.930948019 CEST	51533	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.930974007 CEST	443	51533	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.935314894 CEST	51533	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.935522079 CEST	51533	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.935538054 CEST	443	51533	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.938981056 CEST	443	51527	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.939042091 CEST	443	51527	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.939136982 CEST	443	51527	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.939157009 CEST	51527	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.939275980 CEST	51527	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.939399958 CEST	51527	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.939399958 CEST	51527	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.939407110 CEST	443	51527	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.939414978 CEST	443	51527	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.942270041 CEST	51534	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.942279100 CEST	443	51534	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.942517996 CEST	51534	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.942517996 CEST	51534	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.942536116 CEST	443	51534	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.955761909 CEST	443	51530	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.955810070 CEST	443	51530	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.958949089 CEST	51530	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.958949089 CEST	51530	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.959064960 CEST	51530	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.959081888 CEST	443	51530	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.962990046 CEST	51535	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.963001013 CEST	443	51535	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:01.963241100 CEST	51535	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.963664055 CEST	51535	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:01.963674068 CEST	443	51535	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.660820961 CEST	443	51531	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.661309004 CEST	51531	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.661324024 CEST	443	51531	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.661747932 CEST	51531	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.661751986 CEST	443	51531	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.665390015 CEST	443	51532	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.667272091 CEST	51532	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.667288065 CEST	443	51532	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.667680025 CEST	51532	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.667682886 CEST	443	51532	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.679326057 CEST	443	51534	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.679671049 CEST	51534	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.679692030 CEST	443	51534	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.680125952 CEST	51534	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.680131912 CEST	443	51534	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.686330080 CEST	443	51533	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.687006950 CEST	51533	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.687006950 CEST	51533	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.687014103 CEST	443	51533	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.687026978 CEST	443	51533	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.700223923 CEST	443	51535	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.700828075 CEST	51535	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.700829029 CEST	51535	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.700840950 CEST	443	51535	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.700855017 CEST	443	51535	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.702111006 CEST	51469	443	192.168.2.4	142.250.186.100
Oct 21, 2024 11:02:02.702147961 CEST	443	51469	142.250.186.100	192.168.2.4
Oct 21, 2024 11:02:02.790422916 CEST	443	51531	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.790443897 CEST	443	51531	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.790477037 CEST	443	51531	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.790523052 CEST	51531	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.790690899 CEST	51531	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.790704012 CEST	443	51531	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.790716887 CEST	51531	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.790721893 CEST	443	51531	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.793275118 CEST	51536	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.793301105 CEST	443	51536	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.793356895 CEST	51536	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.793490887 CEST	51536	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.793503046 CEST	443	51536	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.794328928 CEST	443	51532	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.794466019 CEST	443	51532	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.794579029 CEST	51532	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.794620991 CEST	51532	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.794635057 CEST	443	51532	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.794642925 CEST	51532	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.794647932 CEST	443	51532	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.797496080 CEST	51537	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.797511101 CEST	443	51537	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.797585964 CEST	51537	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.797708988 CEST	51537	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.797724009 CEST	443	51537	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.807936907 CEST	443	51534	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.808068037 CEST	443	51534	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.808130026 CEST	51534	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.808165073 CEST	51534	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.808173895 CEST	443	51534	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.808185101 CEST	51534	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.808188915 CEST	443	51534	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.810935020 CEST	51538	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.810942888 CEST	443	51538	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.811007023 CEST	51538	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.811393976 CEST	51538	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.811402082 CEST	443	51538	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.822632074 CEST	443	51533	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.822678089 CEST	443	51533	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.822839022 CEST	51533	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.822877884 CEST	51533	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.822881937 CEST	443	51533	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.822891951 CEST	51533	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.822896004 CEST	443	51533	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.824708939 CEST	51539	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.824729919 CEST	443	51539	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.824882030 CEST	51539	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.825009108 CEST	51539	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.825021029 CEST	443	51539	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.831451893 CEST	443	51535	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.831471920 CEST	443	51535	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.831502914 CEST	443	51535	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.831517935 CEST	51535	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.831557989 CEST	51535	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.831695080 CEST	51535	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.831698895 CEST	443	51535	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.831715107 CEST	51535	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.831718922 CEST	443	51535	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.833616018 CEST	51540	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.833689928 CEST	443	51540	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:02.833755016 CEST	51540	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.833875895 CEST	51540	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:02.833909988 CEST	443	51540	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.536600113 CEST	443	51536	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.537110090 CEST	51536	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.537127972 CEST	443	51536	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.537568092 CEST	51536	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.537573099 CEST	443	51536	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.549499035 CEST	443	51537	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.549873114 CEST	51537	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.549885035 CEST	443	51537	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.550235987 CEST	51537	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.550240993 CEST	443	51537	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.558425903 CEST	443	51538	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.558727026 CEST	51538	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.558739901 CEST	443	51538	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.559070110 CEST	51538	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.559073925 CEST	443	51538	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.560043097 CEST	443	51539	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.560324907 CEST	51539	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.560333967 CEST	443	51539	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.560626984 CEST	51539	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.560631990 CEST	443	51539	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.572762012 CEST	443	51540	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.573131084 CEST	51540	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.573165894 CEST	443	51540	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.573525906 CEST	51540	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.573537111 CEST	443	51540	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.666343927 CEST	443	51536	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.666390896 CEST	443	51536	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.666464090 CEST	51536	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.666630030 CEST	51536	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.666630030 CEST	51536	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.666645050 CEST	443	51536	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.666649103 CEST	443	51536	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.669462919 CEST	51541	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.669548035 CEST	443	51541	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.669663906 CEST	51541	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.669805050 CEST	51541	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.669842005 CEST	443	51541	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.678754091 CEST	443	51537	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.678898096 CEST	443	51537	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.679008961 CEST	51537	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.679056883 CEST	51537	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.679064989 CEST	443	51537	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.679092884 CEST	51537	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.679097891 CEST	443	51537	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.681103945 CEST	51542	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.681145906 CEST	443	51542	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.681230068 CEST	51542	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.681344986 CEST	51542	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.681376934 CEST	443	51542	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.689783096 CEST	443	51539	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.689786911 CEST	443	51538	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.689804077 CEST	443	51539	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.689846992 CEST	443	51539	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.689882040 CEST	51539	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.689882040 CEST	51539	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.689918995 CEST	443	51538	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.689984083 CEST	51539	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.689984083 CEST	51539	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.689995050 CEST	443	51539	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.689996004 CEST	51538	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.690004110 CEST	443	51539	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.690087080 CEST	51538	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.690090895 CEST	443	51538	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.690099955 CEST	51538	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.690103054 CEST	443	51538	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.692543030 CEST	51543	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.692563057 CEST	51544	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.692588091 CEST	443	51544	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.692605019 CEST	443	51543	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.692641973 CEST	51544	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.692675114 CEST	51543	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.692852020 CEST	51543	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.692852974 CEST	51544	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.692873001 CEST	443	51544	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.692881107 CEST	443	51543	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.704582930 CEST	443	51540	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.704622030 CEST	443	51540	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.704669952 CEST	51540	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.704847097 CEST	51540	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.704869986 CEST	443	51540	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.704894066 CEST	51540	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.704905987 CEST	443	51540	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.706839085 CEST	51545	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.706871033 CEST	443	51545	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:03.706949949 CEST	51545	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.707062006 CEST	51545	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:03.707072973 CEST	443	51545	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.410746098 CEST	443	51541	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.411636114 CEST	51541	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.411637068 CEST	51541	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.411700010 CEST	443	51541	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.411727905 CEST	443	51541	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.417593002 CEST	443	51542	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.418270111 CEST	51542	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.418270111 CEST	51542	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.418292999 CEST	443	51542	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.418328047 CEST	443	51542	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.449858904 CEST	443	51544	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.450520039 CEST	51544	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.450520039 CEST	51544	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.450541019 CEST	443	51544	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.450548887 CEST	443	51544	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.455590010 CEST	443	51545	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.456247091 CEST	51545	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.456247091 CEST	51545	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.456269026 CEST	443	51545	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.456302881 CEST	443	51545	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.542673111 CEST	443	51541	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.542731047 CEST	443	51541	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.542829990 CEST	51541	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.543113947 CEST	51541	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.543144941 CEST	443	51541	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.543188095 CEST	51541	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.543205976 CEST	443	51541	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.545389891 CEST	51546	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.545416117 CEST	443	51546	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.546587944 CEST	443	51542	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.546736002 CEST	51546	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.546891928 CEST	51546	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.546901941 CEST	443	51546	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.546962976 CEST	443	51542	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.547341108 CEST	51542	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.547378063 CEST	51542	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.547378063 CEST	51542	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.547408104 CEST	443	51542	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.547427893 CEST	443	51542	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.549482107 CEST	51547	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.549499989 CEST	443	51547	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.549649954 CEST	51547	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.549930096 CEST	51547	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.549945116 CEST	443	51547	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.582572937 CEST	443	51544	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.582632065 CEST	443	51544	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.582726002 CEST	443	51544	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.582766056 CEST	51544	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.582859993 CEST	51544	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.582885027 CEST	51544	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.582892895 CEST	443	51544	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.582927942 CEST	51544	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.582932949 CEST	443	51544	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.584923983 CEST	51548	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.584961891 CEST	443	51548	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.585138083 CEST	51548	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.585365057 CEST	51548	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.585381985 CEST	443	51548	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.589303017 CEST	443	51545	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.589337111 CEST	443	51545	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.589375019 CEST	443	51545	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.589438915 CEST	51545	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.589438915 CEST	51545	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.589571953 CEST	51545	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.589580059 CEST	443	51545	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.589607000 CEST	51545	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.589612007 CEST	443	51545	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.591617107 CEST	51549	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.591643095 CEST	443	51549	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.591804981 CEST	51549	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.591922998 CEST	51549	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.591929913 CEST	443	51549	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.631314993 CEST	443	51543	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.632009029 CEST	51543	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.632009029 CEST	51543	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.632081032 CEST	443	51543	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.632110119 CEST	443	51543	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.762651920 CEST	443	51543	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.762696981 CEST	443	51543	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.762902021 CEST	51543	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.762902021 CEST	51543	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.762957096 CEST	51543	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.762984037 CEST	443	51543	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.764848948 CEST	51550	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.764869928 CEST	443	51550	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:04.765079021 CEST	51550	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.765079021 CEST	51550	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:04.765104055 CEST	443	51550	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.297420979 CEST	443	51546	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.298141003 CEST	51546	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.298141003 CEST	51546	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.298156023 CEST	443	51546	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.298171043 CEST	443	51546	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.301456928 CEST	443	51547	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.302078962 CEST	51547	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.302078962 CEST	51547	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.302098036 CEST	443	51547	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.302105904 CEST	443	51547	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.321288109 CEST	443	51549	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.321944952 CEST	51549	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.321944952 CEST	51549	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.321959972 CEST	443	51549	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.321968079 CEST	443	51549	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.340858936 CEST	443	51548	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.341191053 CEST	51548	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.341248989 CEST	443	51548	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.341543913 CEST	51548	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.341561079 CEST	443	51548	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.430531025 CEST	443	51546	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.430574894 CEST	443	51546	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.430823088 CEST	51546	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.430823088 CEST	51546	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.430871010 CEST	51546	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.430886030 CEST	443	51546	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.433228016 CEST	51551	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.433284044 CEST	443	51551	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.433350086 CEST	443	51547	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.433408022 CEST	443	51547	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.433442116 CEST	51551	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.433501959 CEST	443	51547	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.433538914 CEST	51547	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.433597088 CEST	51547	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.433607101 CEST	51551	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.433628082 CEST	51547	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.433630943 CEST	443	51551	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.433635950 CEST	443	51547	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.433674097 CEST	51547	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.433677912 CEST	443	51547	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.435698986 CEST	51552	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.435722113 CEST	443	51552	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.436111927 CEST	51552	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.436111927 CEST	51552	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.436181068 CEST	443	51552	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.451148987 CEST	443	51549	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.451175928 CEST	443	51549	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.451211929 CEST	443	51549	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.451343060 CEST	51549	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.451369047 CEST	51549	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.451369047 CEST	51549	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.451380968 CEST	443	51549	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.451392889 CEST	443	51549	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.453295946 CEST	51553	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.453313112 CEST	443	51553	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.453464985 CEST	51553	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.453527927 CEST	51553	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.453532934 CEST	443	51553	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.472949982 CEST	443	51548	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.473086119 CEST	443	51548	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.473229885 CEST	51548	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.473229885 CEST	51548	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.473278999 CEST	51548	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.473299980 CEST	443	51548	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.475133896 CEST	51554	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.475150108 CEST	443	51554	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.475341082 CEST	51554	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.475409985 CEST	51554	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.475415945 CEST	443	51554	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.503485918 CEST	443	51550	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.503791094 CEST	51550	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.503801107 CEST	443	51550	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.504177094 CEST	51550	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.504180908 CEST	443	51550	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.635261059 CEST	443	51550	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.635307074 CEST	443	51550	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.635446072 CEST	51550	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.635518074 CEST	51550	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.635518074 CEST	51550	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.635526896 CEST	443	51550	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.635535002 CEST	443	51550	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.638977051 CEST	51555	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.638998032 CEST	443	51555	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:05.639116049 CEST	51555	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.639288902 CEST	51555	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:05.639305115 CEST	443	51555	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.163837910 CEST	443	51551	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.164376020 CEST	51551	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.164421082 CEST	443	51551	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.164665937 CEST	51551	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.164679050 CEST	443	51551	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.178189039 CEST	443	51553	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.178546906 CEST	51553	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.178560019 CEST	443	51553	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.178884983 CEST	51553	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.178889036 CEST	443	51553	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.192049980 CEST	443	51552	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.192375898 CEST	51552	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.192409039 CEST	443	51552	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.192819118 CEST	51552	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.192830086 CEST	443	51552	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.209793091 CEST	443	51554	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.210155964 CEST	51554	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.210171938 CEST	443	51554	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.210714102 CEST	51554	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.210717916 CEST	443	51554	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.294548035 CEST	443	51551	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.294573069 CEST	443	51551	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.294611931 CEST	443	51551	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.294657946 CEST	51551	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.294697046 CEST	51551	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.294898033 CEST	51551	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.294898033 CEST	51551	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.294924974 CEST	443	51551	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.294955015 CEST	443	51551	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.297333956 CEST	51556	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.297349930 CEST	443	51556	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.297611952 CEST	51556	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.297729015 CEST	51556	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.297741890 CEST	443	51556	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.308187008 CEST	443	51553	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.309014082 CEST	443	51553	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.309089899 CEST	51553	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.309123039 CEST	51553	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.309123039 CEST	51553	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.309134007 CEST	443	51553	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.309142113 CEST	443	51553	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.311480045 CEST	51557	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.311506033 CEST	443	51557	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.311671972 CEST	51557	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.311671972 CEST	51557	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.311696053 CEST	443	51557	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.324420929 CEST	443	51552	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.324569941 CEST	443	51552	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.324659109 CEST	51552	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.324659109 CEST	51552	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.324814081 CEST	51552	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.324826956 CEST	443	51552	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.326807976 CEST	51558	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.326817036 CEST	443	51558	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.326958895 CEST	51558	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.327030897 CEST	51558	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.327042103 CEST	443	51558	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.338852882 CEST	443	51554	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.339001894 CEST	443	51554	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.339095116 CEST	51554	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.339116096 CEST	51554	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.339116096 CEST	51554	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.339128971 CEST	443	51554	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.339135885 CEST	443	51554	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.341067076 CEST	51559	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.341077089 CEST	443	51559	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.341209888 CEST	51559	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.341393948 CEST	51559	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.341406107 CEST	443	51559	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.368635893 CEST	443	51555	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.369395971 CEST	51555	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.369395971 CEST	51555	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.369415045 CEST	443	51555	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.369443893 CEST	443	51555	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.501761913 CEST	443	51555	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.502326012 CEST	443	51555	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.502362967 CEST	443	51555	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.502451897 CEST	51555	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.502660990 CEST	51555	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.502660990 CEST	51555	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.502681017 CEST	443	51555	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.502691031 CEST	443	51555	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.506532907 CEST	51560	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.506620884 CEST	443	51560	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:06.506774902 CEST	51560	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.506885052 CEST	51560	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:06.506921053 CEST	443	51560	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.014554977 CEST	443	51556	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.015012980 CEST	51556	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.015022993 CEST	443	51556	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.015537024 CEST	51556	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.015542984 CEST	443	51556	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.041574955 CEST	443	51557	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.048830986 CEST	51557	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.048854113 CEST	443	51557	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.050939083 CEST	51557	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.050945044 CEST	443	51557	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.065031052 CEST	443	51559	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.065701008 CEST	51559	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.065707922 CEST	443	51559	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.066461086 CEST	51559	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.066466093 CEST	443	51559	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.073436022 CEST	443	51558	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.074124098 CEST	51558	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.074124098 CEST	51558	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.074132919 CEST	443	51558	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.074145079 CEST	443	51558	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.142968893 CEST	443	51556	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.143209934 CEST	443	51556	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.143331051 CEST	51556	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.143331051 CEST	51556	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.143331051 CEST	51556	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.147114992 CEST	51561	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.147190094 CEST	443	51561	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.147433043 CEST	51561	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.147695065 CEST	51561	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.147746086 CEST	443	51561	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.177678108 CEST	443	51557	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.177700996 CEST	443	51557	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.177741051 CEST	443	51557	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.177767038 CEST	51557	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.177834034 CEST	51557	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.177938938 CEST	51557	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.177938938 CEST	51557	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.177953005 CEST	443	51557	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.177961111 CEST	443	51557	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.180166960 CEST	51562	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.180197001 CEST	443	51562	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.180389881 CEST	51562	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.180437088 CEST	51562	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.180449009 CEST	443	51562	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.193479061 CEST	443	51559	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.193617105 CEST	443	51559	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.193741083 CEST	51559	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.194005966 CEST	51559	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.194010973 CEST	443	51559	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.194056034 CEST	51559	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.194060087 CEST	443	51559	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.195971966 CEST	51563	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.196026087 CEST	443	51563	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.196160078 CEST	51563	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.199418068 CEST	51563	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.199443102 CEST	443	51563	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.202476978 CEST	443	51558	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.202640057 CEST	443	51558	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.202704906 CEST	51558	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.202857971 CEST	51558	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.202862978 CEST	443	51558	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.202917099 CEST	51558	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.202922106 CEST	443	51558	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.207288027 CEST	51564	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.207317114 CEST	443	51564	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.208515882 CEST	51564	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.208736897 CEST	51564	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.208750963 CEST	443	51564	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.267951012 CEST	443	51560	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.271770000 CEST	51560	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.271770000 CEST	51560	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.271795034 CEST	443	51560	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.271826982 CEST	443	51560	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.402158976 CEST	443	51560	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.402218103 CEST	443	51560	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.402297020 CEST	51560	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.402460098 CEST	51560	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.402483940 CEST	443	51560	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.402518988 CEST	51560	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.402535915 CEST	443	51560	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.404910088 CEST	51565	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.404937983 CEST	443	51565	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.405123949 CEST	51565	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.405123949 CEST	51565	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.405157089 CEST	443	51565	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.450539112 CEST	51556	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.450544119 CEST	443	51556	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.914702892 CEST	443	51561	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.915149927 CEST	51561	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.915205956 CEST	443	51561	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.915631056 CEST	51561	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.915648937 CEST	443	51561	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.916436911 CEST	443	51562	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.916707993 CEST	51562	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.916723013 CEST	443	51562	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.917104006 CEST	51562	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.917114973 CEST	443	51562	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.952656984 CEST	443	51564	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.952975035 CEST	51564	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.952987909 CEST	443	51564	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.953432083 CEST	51564	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.953438044 CEST	443	51564	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.956095934 CEST	443	51563	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.956420898 CEST	51563	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.956453085 CEST	443	51563	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:07.956818104 CEST	51563	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:07.956845999 CEST	443	51563	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.048063993 CEST	443	51562	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.048114061 CEST	443	51562	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.048177004 CEST	51562	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.048353910 CEST	51562	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.048353910 CEST	51562	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.048389912 CEST	443	51562	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.048425913 CEST	443	51562	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.051223040 CEST	51566	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.051258087 CEST	443	51566	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.051326036 CEST	51566	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.051450014 CEST	51566	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.051465034 CEST	443	51566	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.082176924 CEST	443	51564	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.082319975 CEST	443	51564	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.082398891 CEST	51564	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.082524061 CEST	51564	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.082536936 CEST	443	51564	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.082546949 CEST	51564	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.082552910 CEST	443	51564	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.085074902 CEST	51567	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.085095882 CEST	443	51567	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.085194111 CEST	51567	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.085262060 CEST	51567	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.085270882 CEST	443	51567	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.089132071 CEST	443	51563	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.089201927 CEST	443	51563	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.089263916 CEST	51563	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.089292049 CEST	443	51563	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.089344978 CEST	51563	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.089420080 CEST	51563	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.089420080 CEST	51563	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.089463949 CEST	443	51563	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.089488983 CEST	443	51563	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.091586113 CEST	51568	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.091609955 CEST	443	51568	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.091667891 CEST	51568	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.091785908 CEST	51568	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.091794968 CEST	443	51568	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.127711058 CEST	443	51565	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.128074884 CEST	51565	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.128086090 CEST	443	51565	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.128695965 CEST	51565	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.128700018 CEST	443	51565	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.250653982 CEST	443	51561	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.250684977 CEST	443	51561	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.250741005 CEST	443	51561	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.250802994 CEST	51561	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.250997066 CEST	51561	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.250997066 CEST	51561	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.251020908 CEST	443	51561	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.251043081 CEST	443	51561	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.254127026 CEST	51569	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.254149914 CEST	443	51569	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.254218102 CEST	51569	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.254349947 CEST	51569	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.254359961 CEST	443	51569	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.256298065 CEST	443	51565	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.256354094 CEST	443	51565	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.256402016 CEST	51565	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.256547928 CEST	51565	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.256561995 CEST	443	51565	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.256573915 CEST	51565	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.256578922 CEST	443	51565	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.258627892 CEST	51570	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.258635998 CEST	443	51570	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.258696079 CEST	51570	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.258822918 CEST	51570	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.258837938 CEST	443	51570	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.785037041 CEST	443	51566	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.785576105 CEST	51566	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.785604000 CEST	443	51566	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.786231995 CEST	51566	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.786237955 CEST	443	51566	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.811903954 CEST	443	51567	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.812462091 CEST	443	51568	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.812503099 CEST	51567	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.812513113 CEST	443	51567	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.812748909 CEST	51567	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.812753916 CEST	443	51567	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.813122988 CEST	51568	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.813149929 CEST	443	51568	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.813750982 CEST	51568	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.813755989 CEST	443	51568	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.930119991 CEST	443	51566	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.930207014 CEST	443	51566	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.930274010 CEST	51566	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.930505037 CEST	51566	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.930505037 CEST	51566	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.930517912 CEST	443	51566	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.930531025 CEST	443	51566	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.933218002 CEST	51571	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.933244944 CEST	443	51571	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.933466911 CEST	51571	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.933466911 CEST	51571	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.933494091 CEST	443	51571	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.940901995 CEST	443	51567	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.941051960 CEST	443	51567	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.941158056 CEST	443	51568	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.941167116 CEST	51567	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.941167116 CEST	51567	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.941191912 CEST	51567	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.941205978 CEST	443	51567	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.941314936 CEST	443	51568	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.941375017 CEST	51568	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.941555023 CEST	51568	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.941555023 CEST	51568	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.941565037 CEST	443	51568	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.941571951 CEST	443	51568	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.943608046 CEST	51572	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.943631887 CEST	443	51572	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.943784952 CEST	51573	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.943837881 CEST	51572	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.943870068 CEST	443	51573	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.943983078 CEST	51572	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.943993092 CEST	51573	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.943994045 CEST	443	51572	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.944080114 CEST	51573	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.944103003 CEST	443	51573	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.989528894 CEST	443	51569	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.990247011 CEST	51569	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.990247011 CEST	51569	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.990263939 CEST	443	51569	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.990279913 CEST	443	51569	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.993719101 CEST	443	51570	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.994368076 CEST	51570	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.994368076 CEST	51570	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:08.994384050 CEST	443	51570	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:08.994391918 CEST	443	51570	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:09.117579937 CEST	443	51569	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:09.117752075 CEST	443	51569	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:09.117849112 CEST	51569	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:09.117849112 CEST	51569	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:09.119772911 CEST	51569	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:09.119787931 CEST	443	51569	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:09.120062113 CEST	51574	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:09.120102882 CEST	443	51574	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:09.120208025 CEST	51574	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:09.120289087 CEST	51574	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:09.120301962 CEST	443	51574	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:09.123920918 CEST	443	51570	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:09.123969078 CEST	443	51570	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:09.124119043 CEST	51570	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:09.124119043 CEST	51570	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:09.124135017 CEST	51570	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:09.124139071 CEST	443	51570	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:09.125902891 CEST	51575	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:09.125926018 CEST	443	51575	13.107.246.45	192.168.2.4
Oct 21, 2024 11:02:09.126148939 CEST	51575	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:09.126148939 CEST	51575	443	192.168.2.4	13.107.246.45
Oct 21, 2024 11:02:09.126173019 CEST	443	51575	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 21, 2024 11:00:46.548677921 CEST	53	57492	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:46.556863070 CEST	53	55607	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:47.814094067 CEST	58340	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:00:47.814419985 CEST	60984	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:00:47.821393013 CEST	53	60984	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:47.821476936 CEST	53	58340	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:47.876106977 CEST	53	55896	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:48.666177988 CEST	52099	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:00:48.666420937 CEST	58663	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:00:48.673489094 CEST	53	58663	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:48.673619986 CEST	53	52099	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:50.109452963 CEST	53	50875	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:50.171348095 CEST	62642	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:00:50.172250032 CEST	59772	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:00:50.178520918 CEST	53	62642	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:50.178853035 CEST	53	59772	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:52.096946001 CEST	61717	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:00:52.097104073 CEST	57123	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:00:52.104150057 CEST	53	57123	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:52.104322910 CEST	53	61717	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:52.105303049 CEST	53	59953	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:52.309979916 CEST	53	61868	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:53.997741938 CEST	61422	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:00:53.998075962 CEST	62571	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:00:54.002222061 CEST	53	58026	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:54.005088091 CEST	53	62571	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:54.005167961 CEST	53	61422	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:54.406037092 CEST	51663	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:00:54.406388998 CEST	59585	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:00:54.413269043 CEST	53	59585	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:54.413602114 CEST	53	51663	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:58.848324060 CEST	61798	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:00:58.848763943 CEST	63232	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:00:58.855106115 CEST	53	61798	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:58.855264902 CEST	53	63232	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:58.943419933 CEST	49650	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:00:58.944109917 CEST	56800	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:00:58.950104952 CEST	53	49650	1.1.1.1	192.168.2.4
Oct 21, 2024 11:00:58.951095104 CEST	53	56800	1.1.1.1	192.168.2.4
Oct 21, 2024 11:01:04.098336935 CEST	138	138	192.168.2.4	192.168.2.255
Oct 21, 2024 11:01:04.863929987 CEST	53	57808	1.1.1.1	192.168.2.4
Oct 21, 2024 11:01:15.848335981 CEST	53	50439	162.159.36.2	192.168.2.4
Oct 21, 2024 11:01:16.471120119 CEST	51843	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:01:16.485502005 CEST	53	51843	1.1.1.1	192.168.2.4
Oct 21, 2024 11:01:50.220552921 CEST	60388	53	192.168.2.4	1.1.1.1
Oct 21, 2024 11:01:50.228811979 CEST	53	60388	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 21, 2024 11:00:47.814094067 CEST	192.168.2.4	1.1.1.1	0xe05	Standard query (0)	forms.gle	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:00:47.814419985 CEST	192.168.2.4	1.1.1.1	0x6dee	Standard query (0)	forms.gle	65	IN (0x0001)	false
Oct 21, 2024 11:00:48.666177988 CEST	192.168.2.4	1.1.1.1	0xa990	Standard query (0)	docs.google.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:00:48.666420937 CEST	192.168.2.4	1.1.1.1	0x4a28	Standard query (0)	docs.google.com	65	IN (0x0001)	false
Oct 21, 2024 11:00:50.171348095 CEST	192.168.2.4	1.1.1.1	0xecdb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:00:50.172250032 CEST	192.168.2.4	1.1.1.1	0x6b49	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 21, 2024 11:00:52.096946001 CEST	192.168.2.4	1.1.1.1	0x459e	Standard query (0)	lh4.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:00:52.097104073 CEST	192.168.2.4	1.1.1.1	0xdd7b	Standard query (0)	lh4.googleusercontent.com	65	IN (0x0001)	false
Oct 21, 2024 11:00:53.997741938 CEST	192.168.2.4	1.1.1.1	0xfe5e	Standard query (0)	lh4.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:00:53.998075962 CEST	192.168.2.4	1.1.1.1	0x93dd	Standard query (0)	lh4.googleusercontent.com	65	IN (0x0001)	false
Oct 21, 2024 11:00:54.406037092 CEST	192.168.2.4	1.1.1.1	0xc75d	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:00:54.406388998 CEST	192.168.2.4	1.1.1.1	0x9569	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 21, 2024 11:00:58.848324060 CEST	192.168.2.4	1.1.1.1	0xc215	Standard query (0)	docs.google.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:00:58.848763943 CEST	192.168.2.4	1.1.1.1	0x13f3	Standard query (0)	docs.google.com	65	IN (0x0001)	false
Oct 21, 2024 11:00:58.943419933 CEST	192.168.2.4	1.1.1.1	0xf194	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:00:58.944109917 CEST	192.168.2.4	1.1.1.1	0xb319	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 21, 2024 11:01:16.471120119 CEST	192.168.2.4	1.1.1.1	0xef35	Standard query (0)	15.164.165.52.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 21, 2024 11:01:50.220552921 CEST	192.168.2.4	1.1.1.1	0x5df8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 21, 2024 11:00:47.821476936 CEST	1.1.1.1	192.168.2.4	0xe05	No error (0)	forms.gle		199.36.158.100	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:00:48.673619986 CEST	1.1.1.1	192.168.2.4	0xa990	No error (0)	docs.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:00:50.178520918 CEST	1.1.1.1	192.168.2.4	0xecdb	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:00:50.178853035 CEST	1.1.1.1	192.168.2.4	0x6b49	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 21, 2024 11:00:52.104150057 CEST	1.1.1.1	192.168.2.4	0xdd7b	No error (0)	lh4.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 11:00:52.104322910 CEST	1.1.1.1	192.168.2.4	0x459e	No error (0)	lh4.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 11:00:52.104322910 CEST	1.1.1.1	192.168.2.4	0x459e	No error (0)	googlehosted.l.googleusercontent.com		142.250.181.225	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:00:54.005088091 CEST	1.1.1.1	192.168.2.4	0x93dd	No error (0)	lh4.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 11:00:54.005167961 CEST	1.1.1.1	192.168.2.4	0xfe5e	No error (0)	lh4.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 11:00:54.005167961 CEST	1.1.1.1	192.168.2.4	0xfe5e	No error (0)	googlehosted.l.googleusercontent.com		142.250.184.225	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:00:54.413602114 CEST	1.1.1.1	192.168.2.4	0xc75d	No error (0)	play.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:00:58.855106115 CEST	1.1.1.1	192.168.2.4	0xc215	No error (0)	docs.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:00:58.950104952 CEST	1.1.1.1	192.168.2.4	0xf194	No error (0)	play.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:01:16.485502005 CEST	1.1.1.1	192.168.2.4	0xef35	Name error (3)	15.164.165.52.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 21, 2024 11:01:40.438155890 CEST	1.1.1.1	192.168.2.4	0x6ef5	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 11:01:40.438155890 CEST	1.1.1.1	192.168.2.4	0x6ef5	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 21, 2024 11:01:50.228811979 CEST	1.1.1.1	192.168.2.4	0x5df8	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

forms.gle

docs.google.com

https:

lh4.googleusercontent.com

play.google.com

fs.microsoft.com

slscr.update.microsoft.com

fe3cr.delivery.mp.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	199.36.158.100	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:00:48 UTC	669	OUT	GET /sxFUT7YRxjaFsuNq6 HTTP/1.1 Host: forms.gle Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 09:00:48 UTC	1207	IN	HTTP/1.1 302 Found Connection: close Content-Length: 0 Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cache-Control: no-cache, no-store, max-age=0, must-revalidate Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport,script-src 'report-sample' 'nonce-6Pb3S-AUHG80qVEpLoflIA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self',script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist Content-Type: application/binary Cross-Origin-Opener-Policy: unsafe-none Cross-Origin-Resource-Policy: same-site Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://docs.google.com/forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/viewform?usp=send_form
2024-10-21 09:00:48 UTC	550	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 61 72 63 68 3d 2a 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 2a 2c 20 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 72 73 69 6f 6e 3d 2a 2c 20 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 72 73 69 6f 6e 2d 6c 69 73 74 3d 2a 2c 20 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 2a 2c 20 63 68 2d 75 61 2d 77 6f 77 36 34 3d 2a 2c 20 63 68 2d 75 61 2d 66 6f 72 6d 2d 66 61 63 74 6f 72 73 3d 2a 2c 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 3d 2a 2c 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 2a 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 4d 6f 6e 2c 20 32 31 20 4f 63 74 20 32 Data Ascii: Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Pragma: no-cacheAccept-Ranges: bytesDate: Mon, 21 Oct 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49737	142.250.185.206	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:00:49 UTC	747	OUT	GET /forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/viewform?usp=send_form HTTP/1.1 Host: docs.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 09:00:50 UTC	3664	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 21 Oct 2024 09:00:49 GMT Content-Security-Policy-Report-Only: report-uri https://csp.withgoogle.com/csp/forms/prod;frame-ancestors 'none' P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/forms/prod;script-src 'report-sample' 'nonce-HjjBiIEYbFc0vdSJYKzPpg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval' Reporting-Endpoints: default="/forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/web-reports?bl=apps-forms.freebird_20241008.02_p1&clss=1&context=eJwNy39M1HUcx_FPn-_7_QVBTsVmKx0NMleaBOTKFA_huAtYCWLwuS0Qf3AsFQVPBuEof8wStVPTUKsphwKi8GWksqRiag3CyoaZhbq5JEWESzrhRLC4Xn88tuc_z6CmIJ9QojJQCSNYieEQJY5NVCIsVIm2KUrMfkqJjc8rMWu2EvsilSiYo8T2BCUOwa9WJbrhj-VK3IVxuUo8DUNrlaB1SnxQpMRuyNuoRDF0bVaiF-a6lEiCa3uVuAcZFUo4YOyQEqbPlAhvVyIaOjrxQN-QEqNQ7FPiI2iaahfn4Y0wu1CQn2wXZXBiqV20gCi2i4nw8MV-OQb-LK8MyPZK87teaQPje69shoFbD-QweDIG5RD4I30y4GWfNKJ8shnyN_tkEWhbfTIYvGuG5QjwgkcyBG6DB7odj2QfbNr5SG6HsYsjUv9xRO4KHZX7IaxqVM6A8-ljsgOChF-Gwu1pfukBe6lfLoPdG_3yAGRVP6HlQoFLaiWQ6paagpltUouBEk3TNsG07Zo2HXbf0bQDkDYwj-yQ0TefsmG_bz59AdcPxlI3-BtiKcCIpRmvmCkSTA4zTYEUjqN0WHQxjjJhx9WF9AmUJ8XTXnClxFMFFPwdTyWw5VAC7YC36xMoC9oaEugSuMwWqoAThRb6ElKLLaQgeouFXoeZTRaKgYpTFjoM95ot5IX8qxYqguR-Cy2GVq-F2mA0PJFkRCLdXJ1IufcTqQgWTrJSGtwPt9IYNKyy0hloW2-lS9DZaqUu6O2x0j9gjbCRE6Yus9FzEP6ejaLhyh4b3QBrahJlwJLMJHoHao8kUSP0Xk2i4MnJNBkGS5PpMcQGpFAiLApKoUxIXVLJCoq-q [TRUNCATED] Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: NID=518=zMAsN-USReiBZWCmk_wUpgchwj_HoWndImrZCGPCatQyGStYpmyli9ar4YYyQN5MV47an_URnr_TNkXwBpapf71RxnTssEORYC1DMv3-HtFiZ6jJnROyBfN3mcZH5pZE4VNO8wvNPeimXIy_HilFro7ADMGf5Yvz5bSKSxZeM2D8Njuwaw; expires=Tue, 22-Apr-2025 09:00:49 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Set-Cookie: S=spreadsheet_forms=g30FHL1t_D4lRnpGzJDx8jNEVbHITGCtpH_nD9q39A8; Domain=.docs.google.com; Expires=Mon, 21-Oct-2024 10:00:49 GMT; Path=/forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA; Secure; HttpOnly; Priority=LOW; SameSite=none Set-Cookie: COMPASS=spreadsheet_forms=CjIACWuJV5OVrjCVPU0cvRjOgMYHeXD-JL08g72j8BIVcidKH18iK0CGAnQxoB0tCboSchDRzNi4Bho0AAlriVcyYGeNgQLJiOUBrqTURjl_CwsshAOFhsFwT2_jBUAEkDRrKETr31T9TEr2qo55Jw==; Domain=.docs.google.com; Expires=Mon, 21-Oct-2024 10:00:49 GMT; Path=/forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA; Secure; HttpOnly; Priority=LOW; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 09:00:50 UTC	3664	IN	Data Raw: 33 35 37 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 48 42 31 65 43 64 2d 55 4d 72 6e 6d 62 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 6f 63 73 2f 73 70 72 65 61 64 73 68 65 65 74 73 2f 66 6f 72 6d 73 2f 66 61 76 69 63 6f 6e 5f 71 70 32 2e 70 6e 67 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 69 63 6f 6e 3f 66 61 6d 69 6c 79 3d 4d 61 74 65 72 69 61 6c 2b 49 63 6f 6e 73 2b 45 78 74 65 6e 64 65 64 22 20 72 Data Ascii: 3571<!DOCTYPE html><html lang="en" class="HB1eCd-UMrnmb"><head><link rel="shortcut icon" sizes="16x16" href="https://ssl.gstatic.com/docs/spreadsheets/forms/favicon_qp2.png"><link href="https://fonts.googleapis.com/icon?family=Material+Icons+Extended" r
2024-10-21 09:00:50 UTC	3664	IN	Data Raw: 62 61 28 32 35 35 2c 20 31 35 37 2c 20 30 2c 20 30 2e 31 35 29 3b 7d 2e 45 43 76 42 52 62 20 2e 4e 32 52 70 42 65 2e 52 44 50 5a 45 20 2e 49 64 35 56 31 2c 20 2e 45 43 76 42 52 62 20 2e 4e 32 52 70 42 65 2e 52 44 50 5a 45 20 2e 6e 51 4f 72 45 62 20 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 32 32 32 2c 20 37 33 2c 20 30 29 3b 7d 2e 45 43 76 42 52 62 20 2e 52 44 50 5a 45 3a 6e 6f 74 28 2e 4e 32 52 70 42 65 29 20 2e 49 64 35 56 31 20 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 39 41 41 30 41 36 3b 7d 2e 64 61 38 62 6d 64 20 2e 45 43 76 42 52 62 20 2e 4e 32 52 70 42 65 2e 52 44 50 5a 45 20 2e 49 64 35 56 31 2c 20 2e 64 61 38 62 6d 64 20 2e 45 43 76 42 52 62 20 2e 4e 32 52 70 42 65 2e 52 44 50 5a 45 20 2e 6e 51 4f 72 45 62 2c 20 2e 77 4d 55 Data Ascii: ba(255, 157, 0, 0.15);}.ECvBRb .N2RpBe.RDPZE .Id5V1, .ECvBRb .N2RpBe.RDPZE .nQOrEb {border-color: rgb(222, 73, 0);}.ECvBRb .RDPZE:not(.N2RpBe) .Id5V1 {border-color: #9AA0A6;}.da8bmd .ECvBRb .N2RpBe.RDPZE .Id5V1, .da8bmd .ECvBRb .N2RpBe.RDPZE .nQOrEb, .wMU
2024-10-21 09:00:50 UTC	3664	IN	Data Raw: 73 20 7e 20 2e 73 6e 42 79 61 63 20 7b 63 6f 6c 6f 72 3a 20 72 67 62 28 32 32 32 2c 20 37 33 2c 20 30 29 3b 7d 2e 79 71 51 53 31 20 2e 63 58 72 64 71 64 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 32 32 32 2c 20 37 33 2c 20 30 29 3b 7d 2e 79 71 51 53 31 20 2e 49 73 37 46 68 62 20 7b 63 6f 6c 6f 72 3a 20 72 67 62 28 32 32 32 2c 20 37 33 2c 20 30 29 3b 7d 2e 79 71 51 53 31 2e 49 59 65 77 72 20 2e 6f 4a 65 57 75 66 2e 6d 49 5a 68 31 63 2c 20 2e 79 71 51 53 31 2e 49 59 65 77 72 20 2e 6f 4a 65 57 75 66 2e 63 58 72 64 71 64 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 20 32 33 31 2c 20 31 39 31 29 3b 7d 2e 74 6f 54 32 75 2e 52 44 50 5a 45 20 2e 7a 48 51 6b 42 66 5b 64 69 73 61 62 6c 65 64 5d 20 Data Ascii: s ~ .snByac {color: rgb(222, 73, 0);}.yqQS1 .cXrdqd {background-color: rgb(222, 73, 0);}.yqQS1 .Is7Fhb {color: rgb(222, 73, 0);}.yqQS1.IYewr .oJeWuf.mIZh1c, .yqQS1.IYewr .oJeWuf.cXrdqd {background-color: rgb(255, 231, 191);}.toT2u.RDPZE .zHQkBf[disabled]
2024-10-21 09:00:50 UTC	2697	IN	Data Raw: 72 61 6d 6f 6e 64 27 2c 20 73 65 72 69 66 3b 7d 2e 4c 67 4e 63 51 65 2c 20 2e 4c 67 4e 63 51 65 20 2e 57 69 63 30 33 63 20 2e 74 4c 39 51 34 63 2c 20 2e 4c 67 4e 63 51 65 20 2e 49 39 4f 4a 48 65 20 2e 4b 52 6f 71 52 63 2c 20 2e 4c 67 4e 63 51 65 20 2e 50 79 72 42 34 2c 20 2e 4c 67 4e 63 51 65 20 2e 73 6e 42 79 61 63 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 64 6f 63 73 2d 52 6f 62 6f 74 6f 27 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 7d 2e 4d 37 65 4d 65 2c 20 2e 4d 37 65 4d 65 20 2e 57 69 63 30 33 63 20 2e 74 4c 39 51 34 63 2c 20 2e 4d 37 65 4d 65 20 2e 49 39 4f 4a 48 65 20 2e 4b 52 6f 71 52 63 2c Data Ascii: ramond', serif;}.LgNcQe, .LgNcQe .Wic03c .tL9Q4c, .LgNcQe .I9OJHe .KRoqRc, .LgNcQe .PyrB4, .LgNcQe .snByac {font-size: 24pt;font-family: 'docs-Roboto', Helvetica, Arial, sans-serif;letter-spacing: 0;}.M7eMe, .M7eMe .Wic03c .tL9Q4c, .M7eMe .I9OJHe .KRoqRc,
2024-10-21 09:00:50 UTC	1378	IN	Data Raw: 33 61 39 35 0d 0a 53 63 34 63 67 36 47 4b 4c 35 66 59 44 70 36 4d 39 46 50 75 6d 79 42 50 76 44 73 79 64 78 51 6d 41 45 44 33 34 55 4e 36 66 22 2c 22 6a 65 22 3a 31 2c 22 73 73 74 75 22 3a 31 37 32 39 35 30 31 32 34 39 38 32 36 35 38 35 2c 22 73 69 22 3a 22 43 4a 72 65 69 5a 32 4f 6e 34 6b 44 46 56 68 72 71 77 49 64 6d 5a 73 32 42 41 22 2c 22 67 73 63 22 3a 6e 75 6c 6c 2c 22 65 69 22 3a 5b 35 37 30 31 38 37 37 2c 35 37 30 33 38 33 39 2c 35 37 30 34 36 32 31 2c 35 37 30 35 32 30 37 2c 35 37 30 35 38 39 31 2c 35 37 30 36 32 37 30 2c 35 37 30 37 34 36 31 2c 35 37 30 37 35 36 35 2c 35 37 31 31 32 32 36 2c 35 37 31 33 31 39 35 2c 35 37 31 33 35 35 34 2c 35 37 31 35 30 35 35 2c 35 37 31 38 36 36 33 2c 35 37 31 38 36 38 30 2c 35 37 31 39 35 30 36 2c 35 37 31 39 Data Ascii: 3a95Sc4cg6GKL5fYDp6M9FPumyBPvDsydxQmAED34UN6f","je":1,"sstu":1729501249826585,"si":"CJreiZ2On4kDFVhrqwIdmZs2BA","gsc":null,"ei":[5701877,5703839,5704621,5705207,5705891,5706270,5707461,5707565,5711226,5713195,5713554,5715055,5718663,5718680,5719506,5719
2024-10-21 09:00:50 UTC	1378	IN	Data Raw: 34 36 39 2c 37 31 34 37 38 34 37 37 2c 37 31 35 31 35 37 38 39 2c 37 31 35 31 35 37 39 37 2c 37 31 35 32 38 36 31 37 2c 37 31 35 32 38 36 32 35 2c 37 31 35 33 30 30 36 33 2c 37 31 35 33 30 30 37 31 2c 37 31 35 33 32 38 34 39 2c 37 31 35 33 32 38 35 37 2c 37 31 35 34 34 38 37 34 2c 37 31 35 34 34 38 38 32 2c 37 31 35 34 35 34 39 33 2c 37 31 35 34 35 35 30 31 2c 37 31 35 34 36 33 34 35 2c 37 31 35 34 36 33 35 33 2c 37 31 35 35 34 34 31 32 2c 37 31 35 35 34 34 32 30 2c 37 31 35 36 30 30 30 39 2c 37 31 35 36 30 30 31 37 2c 37 31 35 36 31 36 36 31 2c 37 31 35 36 31 36 36 39 2c 37 31 35 37 34 30 31 30 2c 37 31 35 37 34 30 31 38 2c 37 31 35 39 32 36 37 30 2c 37 31 36 32 36 33 34 30 2c 37 31 36 32 36 33 35 36 2c 37 31 36 33 35 32 36 34 2c 37 31 36 33 35 32 38 30 Data Ascii: 469,71478477,71515789,71515797,71528617,71528625,71530063,71530071,71532849,71532857,71544874,71544882,71545493,71545501,71546345,71546353,71554412,71554420,71560009,71560017,71561661,71561669,71574010,71574018,71592670,71626340,71626356,71635264,71635280
2024-10-21 09:00:50 UTC	1378	IN	Data Raw: 30 39 2c 39 39 32 34 37 35 37 36 2c 39 39 32 34 37 35 38 34 2c 39 39 33 31 31 30 35 39 2c 39 39 33 31 31 30 36 37 2c 39 39 33 33 31 35 36 33 2c 39 39 33 33 31 35 37 39 2c 39 39 33 36 38 38 33 32 2c 39 39 33 36 38 38 34 30 2c 39 39 33 37 35 30 34 38 2c 39 39 33 37 35 30 35 36 2c 39 39 34 30 30 33 30 32 2c 39 39 34 30 30 33 31 30 2c 39 39 34 30 32 34 33 31 2c 39 39 34 30 32 34 33 39 2c 39 39 34 30 36 30 36 37 2c 39 39 34 30 36 30 38 33 2c 31 30 31 34 30 36 38 31 34 2c 31 30 31 34 30 36 38 32 32 2c 31 30 31 34 37 33 36 37 35 2c 31 30 31 34 37 35 39 30 31 2c 31 30 31 35 31 39 32 34 30 2c 31 30 31 35 31 39 32 34 38 2c 31 30 31 35 34 34 35 34 37 2c 31 30 31 35 34 34 35 35 35 2c 31 30 31 35 36 31 32 36 39 2c 31 30 31 35 36 31 32 37 37 2c 31 30 31 36 30 36 39 30 Data Ascii: 09,99247576,99247584,99311059,99311067,99331563,99331579,99368832,99368840,99375048,99375056,99400302,99400310,99402431,99402439,99406067,99406083,101406814,101406822,101473675,101475901,101519240,101519248,101544547,101544555,101561269,101561277,10160690
2024-10-21 09:00:50 UTC	1378	IN	Data Raw: 34 33 36 33 36 2c 35 37 30 36 32 37 30 2c 39 35 32 33 34 32 38 33 2c 35 30 32 32 31 37 36 38 2c 39 35 31 30 34 32 31 37 2c 39 34 34 38 34 35 36 32 2c 34 39 39 32 34 36 31 34 2c 34 39 33 39 38 37 30 39 2c 35 37 32 36 36 39 35 2c 39 34 39 30 34 32 35 37 2c 39 35 32 33 34 37 39 39 2c 37 31 34 32 39 34 39 35 2c 34 39 33 37 35 33 30 32 2c 39 39 34 30 36 30 38 33 2c 39 34 38 31 33 34 33 31 2c 35 30 35 32 39 31 35 31 2c 37 31 37 32 37 31 35 33 2c 35 37 32 37 32 35 37 2c 37 31 39 36 30 33 38 38 2c 35 37 33 32 39 38 32 2c 34 39 38 32 33 32 31 32 2c 31 30 31 37 30 35 31 30 31 2c 37 31 36 33 39 35 35 30 2c 37 31 35 34 36 33 35 33 2c 39 34 34 38 39 39 32 36 2c 39 35 30 37 38 30 36 34 2c 37 31 36 37 39 34 34 38 2c 34 38 39 36 36 31 34 32 2c 35 37 30 37 34 36 31 2c 37 Data Ascii: 43636,5706270,95234283,50221768,95104217,94484562,49924614,49398709,5726695,94904257,95234799,71429495,49375302,99406083,94813431,50529151,71727153,5727257,71960388,5732982,49823212,101705101,71639550,71546353,94489926,95078064,71679448,48966142,5707461,7
2024-10-21 09:00:50 UTC	1378	IN	Data Raw: 35 37 39 31 34 30 31 2c 35 37 39 37 33 37 36 2c 37 31 36 33 35 32 36 34 2c 34 39 39 37 39 36 37 38 2c 31 30 31 36 30 36 39 30 38 2c 39 35 31 31 38 34 30 31 2c 39 35 31 33 31 34 37 37 2c 39 34 36 34 36 36 32 36 2c 39 35 32 37 31 30 32 35 2c 34 39 36 34 33 36 32 38 2c 39 35 32 33 34 32 37 35 2c 35 30 32 32 31 37 36 30 2c 39 35 31 30 34 32 30 39 2c 39 34 34 38 34 35 35 34 2c 34 39 39 32 34 36 30 36 2c 34 39 33 39 38 37 30 31 2c 35 37 32 36 36 37 39 2c 39 34 39 30 34 32 34 39 2c 39 35 32 33 34 37 39 31 2c 37 31 34 32 39 34 38 37 2c 34 39 33 37 35 32 39 34 2c 39 39 34 30 36 30 36 37 2c 39 34 38 31 33 34 32 33 2c 35 30 35 32 39 31 34 33 2c 37 31 37 32 37 31 33 37 2c 35 37 32 37 32 34 31 2c 37 31 39 36 30 33 38 30 2c 35 37 33 32 39 36 36 2c 34 39 38 32 33 32 30 Data Ascii: 5791401,5797376,71635264,49979678,101606908,95118401,95131477,94646626,95271025,49643628,95234275,50221760,95104209,94484554,49924606,49398701,5726679,94904249,95234791,71429487,49375294,99406067,94813423,50529143,71727137,5727241,71960380,5732966,4982320
2024-10-21 09:00:50 UTC	1378	IN	Data Raw: 6d 65 4a 30 6b 4c 55 6b 70 73 50 31 39 30 51 55 52 68 76 4a 6e 32 22 2c 22 4b 46 6b 73 37 55 65 5a 33 30 6b 4c 55 6b 70 73 50 31 39 30 55 55 4d 52 36 63 76 68 22 2c 22 4c 63 54 61 36 45 6a 65 43 30 6b 4c 55 6b 70 73 50 31 39 30 52 4b 67 76 57 35 71 69 22 2c 22 73 33 55 46 63 6a 47 6a 74 30 6b 4c 55 6b 70 73 50 31 39 30 5a 34 35 66 74 57 52 72 22 2c 22 6f 39 39 65 77 42 51 58 79 30 6b 4c 55 6b 70 73 50 31 39 30 4e 71 32 71 72 36 74 66 22 2c 22 50 48 56 79 79 35 75 53 53 30 6b 4c 55 6b 70 73 50 31 39 30 53 55 73 59 6f 38 67 51 22 2c 22 79 5a 6e 32 31 61 6b 69 64 30 69 53 46 54 43 62 69 45 42 30 57 50 69 47 45 53 54 33 22 2c 22 68 32 54 74 71 7a 6d 51 46 30 6b 4c 55 6b 70 73 50 31 39 30 59 50 4a 69 51 74 37 70 22 2c 22 4d 5a 69 39 76 62 35 55 43 30 6b 4c 55 Data Ascii: meJ0kLUkpsP190QURhvJn2","KFks7UeZ30kLUkpsP190UUMR6cvh","LcTa6EjeC0kLUkpsP190RKgvW5qi","s3UFcjGjt0kLUkpsP190Z45ftWRr","o99ewBQXy0kLUkpsP190Nq2qr6tf","PHVyy5uSS0kLUkpsP190SUsYo8gQ","yZn21akid0iSFTCbiEB0WPiGEST3","h2TtqzmQF0kLUkpsP190YPJiQt7p","MZi9vb5UC0kLU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49746	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:00:52 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-21 09:00:52 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=27890 Date: Mon, 21 Oct 2024 09:00:52 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49749	142.250.181.225	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:00:52 UTC	865	OUT	GET /B-vjoRYNSIlQl8HAsCemiW6akJ2yHBC4b2EoA2G3HKhmVs2CcpaqCpP35m7VNUTdetN_2n66_fMVg5s9CuDEBvQYkeP5IkOVv7IwxdcjVEC_JCG9ElXIY26bHMO1MWo2zA=w1200 HTTP/1.1 Host: lh4.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 09:00:53 UTC	528	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Tue, 22 Oct 2024 09:00:53 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="05_basketball.png" X-Content-Type-Options: nosniff Date: Mon, 21 Oct 2024 09:00:53 GMT Server: fife Content-Length: 121417 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 09:00:53 UTC	850	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 01 2c 08 03 00 00 00 e4 63 ba 62 00 00 03 00 50 4c 54 45 67 82 9a 84 9f b2 7d 99 ad 65 7e 97 61 7d 95 7b 96 aa 88 a3 b4 00 00 01 6c 86 9e 72 8e a2 8c a7 b6 57 75 8e 75 91 a5 47 67 82 6d 8a 9e 5d 79 92 52 70 8a 82 9c ae 40 60 7c 4c 6c 86 91 ac bb 9c b4 bf ff ff fc 70 8a a2 79 93 a9 6a 86 9a 9c af b2 0d 1b 2b 02 09 16 97 ae b9 a6 bd c6 5b 79 8d 3c 5a 74 31 3b 46 96 b0 bf 0e 09 07 bf c9 bf ea f0 e4 92 aa b5 a2 b0 ae 38 4d 60 f3 fe f1 19 1b 1e da df d2 a9 b5 b0 b2 bc b4 27 2d 35 1f 13 00 cb d6 cf 37 2b 0c b4 cc d3 59 50 3e 78 76 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR,cbPLTEg}e~a}{lrWuuGgm]yRp@`\|Llpyj+[y<Zt1;F8M`'-57+YP>xvs
2024-10-21 09:00:53 UTC	1378	IN	Data Raw: be fb ff 7f c3 de 1b b3 8e d8 f1 de f5 ed dd e9 ae ae 76 49 72 89 2c bd 49 16 37 bf c7 c9 4c 80 94 aa 3d b3 f7 00 04 12 99 09 10 48 9c fc f0 9d 93 89 c4 d6 37 29 cb 4d 1a e7 c5 18 41 c8 d5 69 84 8a 5c 9d 72 4a a7 e9 aa 9f d4 13 65 64 e6 12 6e 53 6a 96 9b f1 15 83 dd fd 96 83 1a 57 93 95 b6 3b 4e dc 2d f2 e2 20 38 75 9d 5f 6a af 21 dd 3c ee a6 34 be 19 e7 0c 37 25 32 64 39 e0 94 12 7e 5a 40 9a ad 88 3b 9e 79 4a 29 2f 3b 31 75 42 b4 72 f8 40 96 fb fd 3c 63 4a f7 4f 3b 79 ca 51 5e fd 67 e5 61 af 4c 79 8b ab 1a d3 49 fb db 24 5f 76 7f 4e 9d 15 e6 41 42 09 f6 77 4d 11 d9 4b da 5a 79 ca 61 af 9e 93 c3 db 98 18 ec c4 1c 22 83 96 92 36 fc 92 9c 5c 63 2a 81 1c cc 0b a7 5d 9e 71 42 70 34 57 d4 68 ce c9 19 fa 52 35 64 6d b1 36 75 76 2c f2 b4 a3 65 a8 43 2f f9 3f 27 Data Ascii: vIr,I7L=H7)MAi\rJednSjW;N- 8u_j!<47%2d9~Z@;yJ)/;1uBr@<cJO;yQ^gaLyI$_vNABwMKZya"6\c*]qBp4WhR5dm6uv,eC/?'
2024-10-21 09:00:53 UTC	1378	IN	Data Raw: 2a 9c e9 e5 9f 0f c1 c3 d4 70 ff fa 69 d6 35 5b 82 21 87 01 42 99 57 11 9d e8 cf c5 84 a7 3b a4 31 0e df ec a5 ad 2c 7b 6f 3a b4 ab 11 3e 67 5b 7b a0 f2 ac ac bb db e0 1d 41 53 82 47 01 21 54 e4 a2 56 04 0c 4c 02 16 3c 4b 12 11 4b 47 2a 77 67 40 98 90 10 77 4e 07 39 e2 4d 44 f1 00 4c 3b 05 e4 09 16 75 f8 06 68 04 55 da 1d 81 60 58 62 59 3a 4a 83 57 b4 25 33 0e 5e 15 43 32 04 36 2d ed da 1b ec e6 14 40 56 47 9d 24 7c 3e 96 2a 60 5a 71 9b 32 fb 8a 1c cb e5 a1 bd 58 f2 52 e4 ec 0d 62 e5 a9 65 59 1d c9 04 2b e4 1e fc 8a 1c 4b ac 7f fa d4 7f 84 fe 1c 79 95 82 5c 15 1c 82 74 2d c1 20 5b 0f c0 35 2c ea 8f 5c eb 41 fc ea 2d 96 1f 9e 81 ac 46 70 af 97 76 61 71 46 c5 54 49 92 67 2c 49 af 98 93 68 c5 22 5e 6d 2a ea 67 9c 58 80 1d f9 a9 62 ab 40 51 f5 63 c9 97 75 db Data Ascii: pi5[!BW;1,{o:>g[{ASG!TVL<KKGwg@wN9MDL;uhU`XbY:JW%3^C26-@VG$\|>`Zq2XRbeY+Ky\t- [5,\A-FpvaqFTIg,Ih"^mgXb@Qcu
2024-10-21 09:00:53 UTC	1378	IN	Data Raw: 25 99 58 21 34 77 cf 07 f7 34 ab 24 ca 78 46 24 13 6c 55 f0 f2 71 c3 de d3 82 56 c3 73 30 03 11 44 c9 2f 42 f6 45 1f 49 e6 56 7b 69 27 d0 2a a1 07 cc c5 79 7a da f0 6c 0d 11 bd 92 2b 8b 81 44 f7 47 d6 6e b6 12 12 59 00 07 cd 2e 45 58 d0 cb 2b d5 56 e9 63 9e 1a 2e d4 11 c3 8d 20 c8 18 05 9a 55 60 64 40 88 41 2a aa bc fe 57 07 d3 4a 59 12 91 2b c1 32 15 3c 01 7d 0c 59 3c aa 81 49 7b 7b 96 db bd 3d 33 e4 b9 99 4c 87 d3 c1 e3 70 39 58 a5 c1 fe dd 97 c9 24 57 9a 49 06 cb 09 81 6a bc b0 06 a5 a2 4b 55 6e 93 fa 38 c4 4f 91 68 46 5c 1e ba 0e b5 be 77 f3 64 3d 54 ba f7 15 09 80 2a 0a 79 16 94 6e 5a dd 5b 14 dd d1 27 d8 7c 5f 15 dc ee 86 39 c1 3f 25 88 2a e9 8d 3f 8b 0f 2c 66 23 b0 21 94 27 6a 36 13 f6 8a e7 bd d4 cb a8 60 ac 80 2f cc 49 4b 66 e4 6e 40 23 3d cd 3a Data Ascii: %X!4w4$xF$lUqVs0D/BEIV{i'yzl+DGnY.EX+Vc. U`d@AWJY+2<}Y<I{{=3Lp9X$WIjKUn8OhF\wd=TynZ['\|_9?%?,f#!'j6`/IKfn@#=:
2024-10-21 09:00:53 UTC	1378	IN	Data Raw: b0 ab 92 a8 d5 96 38 d6 39 77 7a 81 61 f9 a9 4b 65 8c ee 3b d0 d5 ed 81 ac b5 f5 5a bb 1e 93 50 d2 c0 91 50 43 af 79 77 22 47 ea 90 2d a0 56 3d 92 ce 5d 48 27 9d a6 73 8b 50 43 84 69 fe b3 c1 01 88 f1 47 59 bd 36 8c 71 26 a7 8a c9 0b 18 87 e3 8c a4 37 b3 b7 c7 07 bf f8 ee cf 7f fe d3 77 1f fe 94 77 be f8 f6 d3 ea 9b b3 d5 d5 af ef d9 a9 74 c2 57 10 db 4e 0e dd cd db c1 61 56 c2 e3 d2 74 88 52 1e b3 9d ca b8 cc 16 44 b6 22 1e b2 7f c3 0c 4a 3b 58 d2 a9 d5 97 de 2d 42 5f 87 24 b3 b0 2a e0 7f c8 48 6c 60 66 8d 22 ed 19 9e 7a 02 53 92 8a f1 b0 87 be 0d 1b db 09 5b e9 93 ab 98 59 47 b5 5c ca e0 83 66 ea 5e 76 b5 a8 d3 40 d8 47 2e 21 cf 0f fe bd 57 e4 3b ad 0e df bb 3f 83 36 dd e5 fd e7 be fe bc 2e 8d 53 eb ec 12 3e 2c 3a b2 f2 1c 15 3b 45 e5 d4 f2 39 e1 e5 61 Data Ascii: 89wzaKe;ZPPCyw"G-V=]H'sPCiGY6q&7wwtWNaVtRD"J;X-B_$*Hl`f"zS[YG\f^v@G.!W;?6.S>,:;E9a
2024-10-21 09:00:53 UTC	1378	IN	Data Raw: 9e 8b a2 f8 af 88 67 bb 79 af e9 38 ed 6e 7f fe e6 aa d7 db 49 72 91 fe fa c3 df bd bd 4d ab d3 47 ee 00 be 96 43 1a d5 41 0b e2 55 c7 36 c4 b9 a1 77 e8 21 30 eb 76 ca 5b 35 c3 c3 3f 2d 0f d9 07 5e 9e f5 a5 df 51 80 f3 1d 1c ac b9 6c be 0b aa 77 42 91 c7 2f f0 a8 07 3c d8 f2 4e 83 44 1d a5 ac 32 55 96 0e d9 12 f2 b4 b7 98 41 45 37 78 65 b7 95 bd ed 91 57 a1 4f c8 fa 61 ae 04 a7 b5 5d 1d da 9a 06 55 a0 52 60 76 0a 6f 60 0b 54 71 d9 e8 47 6e 81 0b 43 46 23 f5 f8 d9 11 1c 10 fd be f4 7e 00 30 d1 e5 ce 9e ef e4 55 8c 17 c3 e2 fd b0 43 1e 1b b1 cb 0b 12 dd 48 13 fb 8e 82 64 a9 33 56 ae 90 d3 39 49 16 bb 5b 06 47 71 2d ae d5 3b 22 5b 61 d9 f8 92 19 96 2a eb 29 cc 5a 66 ad 65 f1 84 86 77 28 56 06 22 21 58 79 64 c9 1e 34 bf 2a dc 4a 06 62 47 1a 6c 31 70 c9 af 5e Data Ascii: gy8nIrMGCAU6w!0v[5?-^QlwB/<ND2UAE7xeWOa]UR`vo`TqGnCF#~0UCHd3V9I[Gq-;"[a)Zfew(V"!Xyd4JbGl1p^
2024-10-21 09:00:53 UTC	1378	IN	Data Raw: bc fd 3f 4f 5e ee 5d 74 9e 6e 3e 9e dd de dc 5c 3d 12 a9 d4 11 22 15 bb 32 d6 66 58 5d db 70 59 6c 94 5b 9d 12 4e 43 a7 00 57 cb 00 70 36 73 7f f8 0d b7 05 40 b5 d6 8a 48 5f d6 fe 8e 3a 93 5a 6b 7b 12 20 b5 a1 10 21 c1 ab 7a 2c ab eb c8 6a a6 06 b1 08 56 83 c6 61 00 3c eb 9b 84 51 fd d6 91 aa ce d0 0a 56 d4 b8 8b 5b 9d 59 00 45 4f 56 19 bd a1 4f b7 6a c9 f6 a5 b0 a7 0e 2a f5 91 ca 53 dd 69 83 70 cc 19 21 93 e4 32 de 2b 1c f9 b5 42 b0 ad ae e7 4a 9e 2c c7 a8 5f 66 9b 0c 11 5c 49 58 18 4b 2c a3 52 05 94 35 11 03 02 4f a4 b4 2c 45 80 44 27 96 3d ed a5 31 c6 91 de b6 e9 58 f6 2e d0 12 cc c8 08 c3 f3 c5 09 23 c6 cd 09 fd f3 17 34 15 6f bd 81 ce 73 64 08 91 25 48 cf 14 a5 60 15 37 b6 70 b3 5f 67 6e 35 7d ff f1 f8 78 54 a8 d2 c4 ef e6 ec ad 3d ae 37 4a d1 e2 87 Data Ascii: ?O^]tn>\="2fX]pYl[NCWp6s@H_:Zk{ !z,jVa<QV[YEOVOj*Sip!2+BJ,_f\IXK,R5O,ED'=1X.#4osd%H`7p_gn5}xT=7J
2024-10-21 09:00:53 UTC	1378	IN	Data Raw: 23 9d 3e 63 e5 12 a7 f7 76 66 75 08 55 a7 a8 d7 58 96 a4 71 be 57 84 12 c3 aa f1 c0 25 11 2f f8 af 80 53 0f b4 0c e1 75 40 17 f8 8f 68 33 ec 3e b6 d6 37 ab 28 a1 93 3c d0 2d 2d 8f 60 6b f7 3a c3 6a 42 5a f5 a4 9a 77 87 ef 09 41 74 b4 1f 76 09 54 61 58 a5 a1 70 83 a1 68 b7 7b 79 41 07 f6 e0 c2 7e 2c 31 2c 55 f2 cd 68 95 fc 41 40 49 f5 c1 f7 2a 13 d1 8a 71 58 2c 6b 3a 23 a9 b2 0e a8 bc 4a a1 35 94 3a f8 15 5d 58 42 28 4c 44 32 3b af 22 d9 2c 2c 15 74 a9 b0 e5 50 a0 0f b7 84 46 c6 5b 40 94 ae 95 71 8e e5 2c 44 2b d7 8b 21 ae b6 aa 9b 1d e8 c4 47 90 b6 70 6b 57 a3 a3 d1 fb 8f 69 74 ca 6e 3b c7 7b f8 ea 57 ae 04 d4 c0 a3 cf 99 61 ad c0 b0 a0 fd 29 7a 24 fa 60 cf 49 28 ef b6 5f 7c 7b 46 f9 a2 78 c3 6a 13 dc 18 b4 3c 3b c5 e8 15 95 ac b6 f9 c5 47 e1 a4 1a d9 3e Data Ascii: #>cvfuUXqW%/Su@h3>7(<--`k:jBZwAtvTaXph{yA~,1,UhA@I*qX,k:#J5:]XB(LD2;",,tPF[@q,D+!GpkWitn;{Wa)z$`I(_\|{Fxj<;G>
2024-10-21 09:00:53 UTC	1378	IN	Data Raw: 59 5f b8 4d 84 2b df 04 28 25 fd 16 14 dd 73 24 95 7b d4 7d 3c 48 04 53 58 36 e0 d4 88 52 04 59 f2 ba 37 cb 0c 5c 79 b1 24 c5 e2 43 0e 78 85 37 76 fa 47 01 81 e8 79 df a3 ae 6a e9 e7 30 97 82 25 b7 7f 5b a0 f6 d5 2a fc ba 6c c6 a1 75 44 93 99 d8 9a 82 dd 3c f2 ba 97 99 9f cf c1 78 7e 97 18 67 a6 6d 11 b4 e9 c7 2a 1d ce ea 4b 54 78 a6 b0 9e a7 2e 8d 91 10 81 8c e7 74 bb b3 99 30 45 27 a2 41 07 b5 44 48 15 23 ac 4f c5 3e b4 fb 3d b0 e9 79 f4 22 c5 6a 88 99 d0 28 04 c1 00 27 27 d1 d7 8e 1f 40 8a 1e 77 64 68 3c 77 34 16 4f 4f df b4 8d 82 be 8f 61 c6 cf 64 09 1e 5d be 7f 8f 3d 38 50 b2 3e 46 41 a7 47 2a 0e 10 c8 67 d8 28 0c 6f 31 31 5e a8 7d a9 1e 24 6b 60 c2 00 7e a5 06 05 08 b8 f2 d7 48 a2 46 44 44 7c 46 89 93 92 d1 a9 85 70 79 05 a1 1f 5d a6 20 01 88 ce 77 Data Ascii: Y_M+(%s${}<HSX6RY7\y$Cx7vGyj0%[luD<x~gmKTx.t0E'ADH#O>=y"j(''@wdh<w4OOad]=8P>FAG*g(o11^}$k`~HFDD\|Fpy] w
2024-10-21 09:00:53 UTC	1378	IN	Data Raw: 63 d4 40 88 11 e1 31 ee 0c 71 8c 43 29 a7 70 d7 47 c6 a2 44 f2 60 95 b4 12 db ac e5 a8 12 24 19 a8 bc d1 b4 18 32 a2 45 2a 86 db 88 ae 5d a8 4d 73 2d 37 13 a2 e3 55 e4 da 80 52 96 ea c3 1a 6a 50 ac 2c 67 23 0f 95 cc 65 31 92 88 45 85 99 04 32 19 a4 e8 c8 e2 3e 25 c5 52 10 0a a0 45 4c 37 70 f1 81 a6 1c cb 42 a8 54 78 05 c2 4a 8e 20 47 01 43 e2 59 9b 27 51 2c 35 1d 76 84 2e 2e 48 b8 db 13 2e 8f 61 d1 2b 42 17 1c 59 bc 82 6c 0b 6a 14 06 ed 1d 8f 15 2d d1 85 81 5e f6 6c 09 5e a5 d3 91 1f bc cd f3 16 01 da 87 86 23 b2 2d f8 dc 25 68 25 cc da 33 03 a0 29 4f 38 79 37 8a 35 0e 4e f7 4a 51 25 19 9c 50 19 00 57 a4 56 a6 5c 05 c8 0a df 42 42 b1 11 29 d7 ae 3c 74 66 02 55 36 00 d2 08 b1 71 4b 83 55 17 89 08 ae 9b 54 1d a8 6b 3c 5e 9f 6c 85 9d 79 0d 1c cb 84 ef 64 95 Data Ascii: c@1qC)pGD`$2E*]Ms-7URjP,g#e1E2>%REL7pBTxJ GCY'Q,5v..H.a+BYlj-^l^#-%h%3)O8y75NJQ%PWV\BB)<tfU6qKUTk<^lyd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49758	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:00:53 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-21 09:00:53 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=27880 Date: Mon, 21 Oct 2024 09:00:53 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-21 09:00:53 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49763	142.250.184.225	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:00:54 UTC	582	OUT	GET /B-vjoRYNSIlQl8HAsCemiW6akJ2yHBC4b2EoA2G3HKhmVs2CcpaqCpP35m7VNUTdetN_2n66_fMVg5s9CuDEBvQYkeP5IkOVv7IwxdcjVEC_JCG9ElXIY26bHMO1MWo2zA=w1200 HTTP/1.1 Host: lh4.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 09:00:55 UTC	539	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="05_basketball.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 121417 X-XSS-Protection: 0 Date: Mon, 21 Oct 2024 08:32:01 GMT Expires: Tue, 22 Oct 2024 08:32:01 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/png Vary: Origin Age: 1734 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 09:00:55 UTC	839	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 01 2c 08 03 00 00 00 e4 63 ba 62 00 00 03 00 50 4c 54 45 67 82 9a 84 9f b2 7d 99 ad 65 7e 97 61 7d 95 7b 96 aa 88 a3 b4 00 00 01 6c 86 9e 72 8e a2 8c a7 b6 57 75 8e 75 91 a5 47 67 82 6d 8a 9e 5d 79 92 52 70 8a 82 9c ae 40 60 7c 4c 6c 86 91 ac bb 9c b4 bf ff ff fc 70 8a a2 79 93 a9 6a 86 9a 9c af b2 0d 1b 2b 02 09 16 97 ae b9 a6 bd c6 5b 79 8d 3c 5a 74 31 3b 46 96 b0 bf 0e 09 07 bf c9 bf ea f0 e4 92 aa b5 a2 b0 ae 38 4d 60 f3 fe f1 19 1b 1e da df d2 a9 b5 b0 b2 bc b4 27 2d 35 1f 13 00 cb d6 cf 37 2b 0c b4 cc d3 59 50 3e 78 76 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR,cbPLTEg}e~a}{lrWuuGgm]yRp@`\|Llpyj+[y<Zt1;F8M`'-57+YP>xvs
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: ca 5d ae f6 8c 1d f3 72 6c d8 1b be fb ff 7f c3 de 1b b3 8e d8 f1 de f5 ed dd e9 ae ae 76 49 72 89 2c bd 49 16 37 bf c7 c9 4c 80 94 aa 3d b3 f7 00 04 12 99 09 10 48 9c fc f0 9d 93 89 c4 d6 37 29 cb 4d 1a e7 c5 18 41 c8 d5 69 84 8a 5c 9d 72 4a a7 e9 aa 9f d4 13 65 64 e6 12 6e 53 6a 96 9b f1 15 83 dd fd 96 83 1a 57 93 95 b6 3b 4e dc 2d f2 e2 20 38 75 9d 5f 6a af 21 dd 3c ee a6 34 be 19 e7 0c 37 25 32 64 39 e0 94 12 7e 5a 40 9a ad 88 3b 9e 79 4a 29 2f 3b 31 75 42 b4 72 f8 40 96 fb fd 3c 63 4a f7 4f 3b 79 ca 51 5e fd 67 e5 61 af 4c 79 8b ab 1a d3 49 fb db 24 5f 76 7f 4e 9d 15 e6 41 42 09 f6 77 4d 11 d9 4b da 5a 79 ca 61 af 9e 93 c3 db 98 18 ec c4 1c 22 83 96 92 36 fc 92 9c 5c 63 2a 81 1c cc 0b a7 5d 9e 71 42 70 34 57 d4 68 ce c9 19 fa 52 35 64 6d b1 36 75 76 Data Ascii: ]rlvIr,I7L=H7)MAi\rJednSjW;N- 8u_j!<47%2d9~Z@;yJ)/;1uBr@<cJO;yQ^gaLyI$_vNABwMKZya"6\c*]qBp4WhR5dm6uv
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: 14 43 96 63 00 39 73 ba b0 e4 c9 2a 9c e9 e5 9f 0f c1 c3 d4 70 ff fa 69 d6 35 5b 82 21 87 01 42 99 57 11 9d e8 cf c5 84 a7 3b a4 31 0e df ec a5 ad 2c 7b 6f 3a b4 ab 11 3e 67 5b 7b a0 f2 ac ac bb db e0 1d 41 53 82 47 01 21 54 e4 a2 56 04 0c 4c 02 16 3c 4b 12 11 4b 47 2a 77 67 40 98 90 10 77 4e 07 39 e2 4d 44 f1 00 4c 3b 05 e4 09 16 75 f8 06 68 04 55 da 1d 81 60 58 62 59 3a 4a 83 57 b4 25 33 0e 5e 15 43 32 04 36 2d ed da 1b ec e6 14 40 56 47 9d 24 7c 3e 96 2a 60 5a 71 9b 32 fb 8a 1c cb e5 a1 bd 58 f2 52 e4 ec 0d 62 e5 a9 65 59 1d c9 04 2b e4 1e fc 8a 1c 4b ac 7f fa d4 7f 84 fe 1c 79 95 82 5c 15 1c 82 74 2d c1 20 5b 0f c0 35 2c ea 8f 5c eb 41 fc ea 2d 96 1f 9e 81 ac 46 70 af 97 76 61 71 46 c5 54 49 92 67 2c 49 af 98 93 68 c5 22 5e 6d 2a ea 67 9c 58 80 1d f9 Data Ascii: Cc9spi5[!BW;1,{o:>g[{ASG!TVL<KKGwg@wN9MDL;uhU`XbY:JW%3^C26-@VG$\|>`Zq2XRbeY+Ky\t- [5,\A-FpvaqFTIg,Ih"^mgX
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: 27 42 24 2c 7d aa 42 a0 40 a8 7c 25 99 58 21 34 77 cf 07 f7 34 ab 24 ca 78 46 24 13 6c 55 f0 f2 71 c3 de d3 82 56 c3 73 30 03 11 44 c9 2f 42 f6 45 1f 49 e6 56 7b 69 27 d0 2a a1 07 cc c5 79 7a da f0 6c 0d 11 bd 92 2b 8b 81 44 f7 47 d6 6e b6 12 12 59 00 07 cd 2e 45 58 d0 cb 2b d5 56 e9 63 9e 1a 2e d4 11 c3 8d 20 c8 18 05 9a 55 60 64 40 88 41 2a aa bc fe 57 07 d3 4a 59 12 91 2b c1 32 15 3c 01 7d 0c 59 3c aa 81 49 7b 7b 96 db bd 3d 33 e4 b9 99 4c 87 d3 c1 e3 70 39 58 a5 c1 fe dd 97 c9 24 57 9a 49 06 cb 09 81 6a bc b0 06 a5 a2 4b 55 6e 93 fa 38 c4 4f 91 68 46 5c 1e ba 0e b5 be 77 f3 64 3d 54 ba f7 15 09 80 2a 0a 79 16 94 6e 5a dd 5b 14 dd d1 27 d8 7c 5f 15 dc ee 86 39 c1 3f 25 88 2a e9 8d 3f 8b 0f 2c 66 23 b0 21 94 27 6a 36 13 f6 8a e7 bd d4 cb a8 60 ac 80 2f Data Ascii: 'B$,}B@\|%X!4w4$xF$lUqVs0D/BEIV{i'yzl+DGnY.EX+Vc. U`d@AWJY+2<}Y<I{{=3Lp9X$WIjKUn8OhF\wd=TynZ['\|_9?%?,f#!'j6`/
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: 4a 2e 11 fa da c9 ad 1e 53 46 ab b0 ab 92 a8 d5 96 38 d6 39 77 7a 81 61 f9 a9 4b 65 8c ee 3b d0 d5 ed 81 ac b5 f5 5a bb 1e 93 50 d2 c0 91 50 43 af 79 77 22 47 ea 90 2d a0 56 3d 92 ce 5d 48 27 9d a6 73 8b 50 43 84 69 fe b3 c1 01 88 f1 47 59 bd 36 8c 71 26 a7 8a c9 0b 18 87 e3 8c a4 37 b3 b7 c7 07 bf f8 ee cf 7f fe d3 77 1f fe 94 77 be f8 f6 d3 ea 9b b3 d5 d5 af ef d9 a9 74 c2 57 10 db 4e 0e dd cd db c1 61 56 c2 e3 d2 74 88 52 1e b3 9d ca b8 cc 16 44 b6 22 1e b2 7f c3 0c 4a 3b 58 d2 a9 d5 97 de 2d 42 5f 87 24 b3 b0 2a e0 7f c8 48 6c 60 66 8d 22 ed 19 9e 7a 02 53 92 8a f1 b0 87 be 0d 1b db 09 5b e9 93 ab 98 59 47 b5 5c ca e0 83 66 ea 5e 76 b5 a8 d3 40 d8 47 2e 21 cf 0f fe bd 57 e4 3b ad 0e df bb 3f 83 36 dd e5 fd e7 be fe bc 2e 8d 53 eb ec 12 3e 2c 3a b2 f2 Data Ascii: J.SF89wzaKe;ZPPCyw"G-V=]H'sPCiGY6q&7wwtWNaVtRD"J;X-B_$*Hl`f"zS[YG\f^v@G.!W;?6.S>,:
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: 14 b5 13 fb ce cb 99 cf ac c5 cd 9e 8b a2 f8 af 88 67 bb 79 af e9 38 ed 6e 7f fe e6 aa d7 db 49 72 91 fe fa c3 df bd bd 4d ab d3 47 ee 00 be 96 43 1a d5 41 0b e2 55 c7 36 c4 b9 a1 77 e8 21 30 eb 76 ca 5b 35 c3 c3 3f 2d 0f d9 07 5e 9e f5 a5 df 51 80 f3 1d 1c ac b9 6c be 0b aa 77 42 91 c7 2f f0 a8 07 3c d8 f2 4e 83 44 1d a5 ac 32 55 96 0e d9 12 f2 b4 b7 98 41 45 37 78 65 b7 95 bd ed 91 57 a1 4f c8 fa 61 ae 04 a7 b5 5d 1d da 9a 06 55 a0 52 60 76 0a 6f 60 0b 54 71 d9 e8 47 6e 81 0b 43 46 23 f5 f8 d9 11 1c 10 fd be f4 7e 00 30 d1 e5 ce 9e ef e4 55 8c 17 c3 e2 fd b0 43 1e 1b b1 cb 0b 12 dd 48 13 fb 8e 82 64 a9 33 56 ae 90 d3 39 49 16 bb 5b 06 47 71 2d ae d5 3b 22 5b 61 d9 f8 92 19 96 2a eb 29 cc 5a 66 ad 65 f1 84 86 77 28 56 06 22 21 58 79 64 c9 1e 34 bf 2a dc Data Ascii: gy8nIrMGCAU6w!0v[5?-^QlwB/<ND2UAE7xeWOa]UR`vo`TqGnCF#~0UCHd3V9I[Gq-;"[a)Zfew(V"!Xyd4
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: 44 00 7f ef 33 17 dc 2c 32 70 ed bc fd 3f 4f 5e ee 5d 74 9e 6e 3e 9e dd de dc 5c 3d 12 a9 d4 11 22 15 bb 32 d6 66 58 5d db 70 59 6c 94 5b 9d 12 4e 43 a7 00 57 cb 00 70 36 73 7f f8 0d b7 05 40 b5 d6 8a 48 5f d6 fe 8e 3a 93 5a 6b 7b 12 20 b5 a1 10 21 c1 ab 7a 2c ab eb c8 6a a6 06 b1 08 56 83 c6 61 00 3c eb 9b 84 51 fd d6 91 aa ce d0 0a 56 d4 b8 8b 5b 9d 59 00 45 4f 56 19 bd a1 4f b7 6a c9 f6 a5 b0 a7 0e 2a f5 91 ca 53 dd 69 83 70 cc 19 21 93 e4 32 de 2b 1c f9 b5 42 b0 ad ae e7 4a 9e 2c c7 a8 5f 66 9b 0c 11 5c 49 58 18 4b 2c a3 52 05 94 35 11 03 02 4f a4 b4 2c 45 80 44 27 96 3d ed a5 31 c6 91 de b6 e9 58 f6 2e d0 12 cc c8 08 c3 f3 c5 09 23 c6 cd 09 fd f3 17 34 15 6f bd 81 ce 73 64 08 91 25 48 cf 14 a5 60 15 37 b6 70 b3 5f 67 6e 35 7d ff f1 f8 78 54 a8 d2 c4 Data Ascii: D3,2p?O^]tn>\="2fX]pYl[NCWp6s@H_:Zk{ !z,jVa<QV[YEOVOj*Sip!2+BJ,_f\IXK,R5O,ED'=1X.#4osd%H`7p_gn5}xT
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: 21 3a 68 1b 05 2b 62 31 c0 67 4f 23 9d 3e 63 e5 12 a7 f7 76 66 75 08 55 a7 a8 d7 58 96 a4 71 be 57 84 12 c3 aa f1 c0 25 11 2f f8 af 80 53 0f b4 0c e1 75 40 17 f8 8f 68 33 ec 3e b6 d6 37 ab 28 a1 93 3c d0 2d 2d 8f 60 6b f7 3a c3 6a 42 5a f5 a4 9a 77 87 ef 09 41 74 b4 1f 76 09 54 61 58 a5 a1 70 83 a1 68 b7 7b 79 41 07 f6 e0 c2 7e 2c 31 2c 55 f2 cd 68 95 fc 41 40 49 f5 c1 f7 2a 13 d1 8a 71 58 2c 6b 3a 23 a9 b2 0e a8 bc 4a a1 35 94 3a f8 15 5d 58 42 28 4c 44 32 3b af 22 d9 2c 2c 15 74 a9 b0 e5 50 a0 0f b7 84 46 c6 5b 40 94 ae 95 71 8e e5 2c 44 2b d7 8b 21 ae b6 aa 9b 1d e8 c4 47 90 b6 70 6b 57 a3 a3 d1 fb 8f 69 74 ca 6e 3b c7 7b f8 ea 57 ae 04 d4 c0 a3 cf 99 61 ad c0 b0 a0 fd 29 7a 24 fa 60 cf 49 28 ef b6 5f 7c 7b 46 f9 a2 78 c3 6a 13 dc 18 b4 3c 3b c5 e8 15 Data Ascii: !:h+b1gO#>cvfuUXqW%/Su@h3>7(<--`k:jBZwAtvTaXph{yA~,1,UhA@I*qX,k:#J5:]XB(LD2;",,tPF[@q,D+!GpkWitn;{Wa)z$`I(_\|{Fxj<;
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: d2 bc 65 70 c2 a7 3a f4 3b 92 7a 59 5f b8 4d 84 2b df 04 28 25 fd 16 14 dd 73 24 95 7b d4 7d 3c 48 04 53 58 36 e0 d4 88 52 04 59 f2 ba 37 cb 0c 5c 79 b1 24 c5 e2 43 0e 78 85 37 76 fa 47 01 81 e8 79 df a3 ae 6a e9 e7 30 97 82 25 b7 7f 5b a0 f6 d5 2a fc ba 6c c6 a1 75 44 93 99 d8 9a 82 dd 3c f2 ba 97 99 9f cf c1 78 7e 97 18 67 a6 6d 11 b4 e9 c7 2a 1d ce ea 4b 54 78 a6 b0 9e a7 2e 8d 91 10 81 8c e7 74 bb b3 99 30 45 27 a2 41 07 b5 44 48 15 23 ac 4f c5 3e b4 fb 3d b0 e9 79 f4 22 c5 6a 88 99 d0 28 04 c1 00 27 27 d1 d7 8e 1f 40 8a 1e 77 64 68 3c 77 34 16 4f 4f df b4 8d 82 be 8f 61 c6 cf 64 09 1e 5d be 7f 8f 3d 38 50 b2 3e 46 41 a7 47 2a 0e 10 c8 67 d8 28 0c 6f 31 31 5e a8 7d a9 1e 24 6b 60 c2 00 7e a5 06 05 08 b8 f2 d7 48 a2 46 44 44 7c 46 89 93 92 d1 a9 85 70 Data Ascii: ep:;zY_M+(%s${}<HSX6RY7\y$Cx7vGyj0%[luD<x~gmKTx.t0E'ADH#O>=y"j(''@wdh<w4OOad]=8P>FAG*g(o11^}$k`~HFDD\|Fp
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: 66 1f 61 48 10 e5 75 d9 50 53 8c 63 d4 40 88 11 e1 31 ee 0c 71 8c 43 29 a7 70 d7 47 c6 a2 44 f2 60 95 b4 12 db ac e5 a8 12 24 19 a8 bc d1 b4 18 32 a2 45 2a 86 db 88 ae 5d a8 4d 73 2d 37 13 a2 e3 55 e4 da 80 52 96 ea c3 1a 6a 50 ac 2c 67 23 0f 95 cc 65 31 92 88 45 85 99 04 32 19 a4 e8 c8 e2 3e 25 c5 52 10 0a a0 45 4c 37 70 f1 81 a6 1c cb 42 a8 54 78 05 c2 4a 8e 20 47 01 43 e2 59 9b 27 51 2c 35 1d 76 84 2e 2e 48 b8 db 13 2e 8f 61 d1 2b 42 17 1c 59 bc 82 6c 0b 6a 14 06 ed 1d 8f 15 2d d1 85 81 5e f6 6c 09 5e a5 d3 91 1f bc cd f3 16 01 da 87 86 23 b2 2d f8 dc 25 68 25 cc da 33 03 a0 29 4f 38 79 37 8a 35 0e 4e f7 4a 51 25 19 9c 50 19 00 57 a4 56 a6 5c 05 c8 0a df 42 42 b1 11 29 d7 ae 3c 74 66 02 55 36 00 d2 08 b1 71 4b 83 55 17 89 08 ae 9b 54 1d a8 6b 3c 5e 9f Data Ascii: faHuPSc@1qC)pGD`$2E*]Ms-7URjP,g#e1E2>%REL7pBTxJ GCY'Q,5v..H.a+BYlj-^l^#-%h%3)O8y75NJQ%PWV\BB)<tfU6qKUTk<^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49764	142.250.185.206	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:00:55 UTC	1435	OUT	POST /forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/naLogImpressions HTTP/1.1 Host: docs.google.com Connection: keep-alive Content-Length: 5335 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-mobile: ?0 X-Client-Deadline-Ms: 20000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/viewform?usp=send_form Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: S=spreadsheet_forms=g30FHL1t_D4lRnpGzJDx8jNEVbHITGCtpH_nD9q39A8; COMPASS=spreadsheet_forms=CjIACWuJV5OVrjCVPU0cvRjOgMYHeXD-JL08g72j8BIVcidKH18iK0CGAnQxoB0tCboSchDRzNi4Bho0AAlriVcyYGeNgQLJiOUBrqTURjl_CwsshAOFhsFwT2_jBUAEkDRrKETr31T9TEr2qo55Jw==; NID=518=zMAsN-USReiBZWCmk_wUpgchwj_HoWndImrZCGPCatQyGStYpmyli9ar4YYyQN5MV47an_URnr_TNkXwBpapf71RxnTssEORYC1DMv3-HtFiZ6jJnROyBfN3mcZH5pZE4VNO8wvNPeimXIy_HilFro7ADMGf5Yvz5bSKSxZeM2D8Njuwaw
2024-10-21 09:00:55 UTC	5335	OUT	Data Raw: 69 6d 70 72 65 73 73 69 6f 6e 42 61 74 63 68 3d 25 35 42 25 35 42 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 31 25 32 43 31 37 32 39 35 30 31 32 35 33 33 30 35 30 30 30 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 31 37 32 39 35 30 31 32 35 33 33 30 35 30 30 30 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 31 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 37 31 36 25 32 43 6e 75 6c 6c 25 32 43 31 25 32 43 31 25 35 44 25 35 44 25 32 43 25 35 42 25 32 32 43 4a 72 65 69 5a 32 4f 6e 34 6b 44 46 56 68 72 71 77 49 64 6d 5a 73 32 42 41 25 32 32 25 32 43 31 37 32 39 35 30 31 32 35 33 33 30 34 30 30 30 25 32 43 31 37 32 39 35 30 31 32 34 39 38 32 36 35 38 35 25 32 43 25 32 32 41 44 46 4e 2d 63 73 46 48 4c 52 66 78 34 6f 45 63 Data Ascii: impressionBatch=%5B%5B%5Bnull%2Cnull%2C1%2C1729501253305000%2Cnull%2Cnull%2Cnull%2C%5B%5B1729501253305000%5D%2Cnull%2C1%5D%2Cnull%2C716%2Cnull%2C1%2C1%5D%5D%2C%5B%22CJreiZ2On4kDFVhrqwIdmZs2BA%22%2C1729501253304000%2C1729501249826585%2C%22ADFN-csFHLRfx4oEc
2024-10-21 09:00:55 UTC	616	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 21 Oct 2024 09:00:55 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/forms/prod;script-src 'report-sample' 'nonce-lUtm9AitqUhzVg7o8oNKVQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval' Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49766	142.250.185.206	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:00:55 UTC	1420	OUT	POST /forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/font/getmetadata HTTP/1.1 Host: docs.google.com Connection: keep-alive Content-Length: 246 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-mobile: ?0 X-Client-Deadline-Ms: 20000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/viewform Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: S=spreadsheet_forms=g30FHL1t_D4lRnpGzJDx8jNEVbHITGCtpH_nD9q39A8; COMPASS=spreadsheet_forms=CjIACWuJV5OVrjCVPU0cvRjOgMYHeXD-JL08g72j8BIVcidKH18iK0CGAnQxoB0tCboSchDRzNi4Bho0AAlriVcyYGeNgQLJiOUBrqTURjl_CwsshAOFhsFwT2_jBUAEkDRrKETr31T9TEr2qo55Jw==; NID=518=zMAsN-USReiBZWCmk_wUpgchwj_HoWndImrZCGPCatQyGStYpmyli9ar4YYyQN5MV47an_URnr_TNkXwBpapf71RxnTssEORYC1DMv3-HtFiZ6jJnROyBfN3mcZH5pZE4VNO8wvNPeimXIy_HilFro7ADMGf5Yvz5bSKSxZeM2D8Njuwaw
2024-10-21 09:00:55 UTC	246	OUT	Data Raw: 66 61 6d 69 6c 69 65 73 3d 41 6d 61 74 69 63 25 32 30 53 43 25 32 43 43 61 76 65 61 74 25 32 43 43 6f 6d 66 6f 72 74 61 61 25 32 43 45 42 25 32 30 47 61 72 61 6d 6f 6e 64 25 32 43 4c 65 78 65 6e 64 25 32 43 4c 6f 62 73 74 65 72 25 32 43 4c 6f 72 61 25 32 43 4d 65 72 72 69 77 65 61 74 68 65 72 25 32 43 4d 6f 6e 74 73 65 72 72 61 74 25 32 43 4e 75 6e 69 74 6f 25 32 43 4f 73 77 61 6c 64 25 32 43 50 61 63 69 66 69 63 6f 25 32 43 50 6c 61 79 66 61 69 72 25 32 30 44 69 73 70 6c 61 79 25 32 43 52 6f 62 6f 74 6f 25 32 43 52 6f 62 6f 74 6f 25 32 30 4d 6f 6e 6f 25 32 43 52 6f 62 6f 74 6f 25 32 30 53 65 72 69 66 25 32 43 53 70 65 63 74 72 61 6c 26 75 73 65 41 6c 6c 53 75 62 73 65 74 73 3d 74 72 75 65 26 66 6f 72 6d 61 74 3d 77 6f 66 66 32 Data Ascii: families=Amatic%20SC%2CCaveat%2CComfortaa%2CEB%20Garamond%2CLexend%2CLobster%2CLora%2CMerriweather%2CMontserrat%2CNunito%2COswald%2CPacifico%2CPlayfair%20Display%2CRoboto%2CRoboto%20Mono%2CRoboto%20Serif%2CSpectral&useAllSubsets=true&format=woff2
2024-10-21 09:00:55 UTC	672	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 21 Oct 2024 09:00:55 GMT Content-Disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 09:00:55 UTC	706	IN	Data Raw: 37 30 30 36 0d 0a 29 5d 7d 27 0a 7b 22 66 6f 6e 74 4d 65 74 61 64 61 74 61 4d 61 70 22 3a 7b 22 43 61 76 65 61 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 46 6f 6e 74 22 3a 66 61 6c 73 65 2c 22 66 6f 6e 74 46 61 63 65 73 22 3a 5b 7b 22 66 6f 6e 74 44 72 61 77 53 69 7a 65 22 3a 7b 22 53 54 79 70 6f 41 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 53 54 79 70 6f 44 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 53 54 79 70 6f 4c 69 6e 65 47 61 70 22 3a 30 2c 22 61 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 63 6d 61 70 46 6f 72 6d 61 74 32 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 70 6f 69 6e 74 34 65 30 30 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 66 73 53 65 6c 65 63 74 69 6f 6e 22 3a 31 39 32 2c 22 6c 69 6e 65 47 61 70 22 3a 30 2c Data Ascii: 7006)]}'{"fontMetadataMap":{"Caveat":{"documentFont":false,"fontFaces":[{"fontDrawSize":{"STypoAscender":960,"STypoDescender":-300,"STypoLineGap":0,"ascender":960,"cmapFormat2":false,"codepoint4e00":false,"descender":-300,"fsSelection":192,"lineGap":0,
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: 74 32 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 70 6f 69 6e 74 34 65 30 30 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 66 73 53 65 6c 65 63 74 69 6f 6e 22 3a 31 39 32 2c 22 6c 69 6e 65 47 61 70 22 3a 30 2c 22 75 6c 43 6f 64 65 50 61 67 65 52 61 6e 67 65 31 22 3a 31 35 31 2c 22 75 6e 69 74 73 50 65 72 45 6d 22 3a 31 30 30 30 2c 22 75 73 57 69 6e 41 73 63 65 6e 74 22 3a 39 37 34 2c 22 75 73 57 69 6e 44 65 73 63 65 6e 74 22 3a 33 31 35 7d 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 22 2c 22 6d 65 6e 75 46 6f 6e 74 22 3a 66 61 6c 73 65 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 66 6f 72 6d 61 74 22 3a 22 77 6f 66 66 32 22 2c 22 69 73 4c 6f 63 61 6c 22 3a 66 61 6c 73 65 2c 22 75 72 6c 22 3a 22 2f 2f 66 6f 6e 74 Data Ascii: t2":false,"codepoint4e00":false,"descender":-300,"fsSelection":192,"lineGap":0,"ulCodePageRange1":151,"unitsPerEm":1000,"usWinAscent":974,"usWinDescent":315},"fontFamily":"Caveat","menuFont":false,"sources":[{"format":"woff2","isLocal":false,"url":"//font
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: 38 2f 57 6e 7a 6e 48 41 63 35 62 41 66 59 42 32 51 52 61 68 37 70 63 70 4e 76 4f 78 2d 70 6a 66 4a 39 65 49 57 70 59 51 2e 77 6f 66 66 32 22 7d 5d 2c 22 73 74 79 6c 65 22 3a 22 6e 6f 72 6d 61 6c 22 2c 22 73 75 62 73 65 74 22 3a 22 4c 41 54 49 4e 22 2c 22 73 75 62 73 65 74 56 61 6c 75 65 22 3a 22 6c 61 74 69 6e 22 2c 22 77 65 69 67 68 74 22 3a 34 30 30 2c 22 77 65 69 67 68 74 65 64 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 20 52 65 67 75 6c 61 72 22 7d 2c 7b 22 66 6f 6e 74 44 72 61 77 53 69 7a 65 22 3a 7b 22 53 54 79 70 6f 41 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 53 54 79 70 6f 44 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 53 54 79 70 6f 4c 69 6e 65 47 61 70 22 3a 30 2c 22 61 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 63 6d 61 70 46 Data Ascii: 8/WnznHAc5bAfYB2QRah7pcpNvOx-pjfJ9eIWpYQ.woff2"}],"style":"normal","subset":"LATIN","subsetValue":"latin","weight":400,"weightedFontFamily":"Caveat Regular"},{"fontDrawSize":{"STypoAscender":960,"STypoDescender":-300,"STypoLineGap":0,"ascender":960,"cmapF
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: 3a 2d 33 30 30 2c 22 66 73 53 65 6c 65 63 74 69 6f 6e 22 3a 31 39 32 2c 22 6c 69 6e 65 47 61 70 22 3a 30 2c 22 75 6c 43 6f 64 65 50 61 67 65 52 61 6e 67 65 31 22 3a 31 35 31 2c 22 75 6e 69 74 73 50 65 72 45 6d 22 3a 31 30 30 30 2c 22 75 73 57 69 6e 41 73 63 65 6e 74 22 3a 39 37 34 2c 22 75 73 57 69 6e 44 65 73 63 65 6e 74 22 3a 33 31 35 7d 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 22 2c 22 6d 65 6e 75 46 6f 6e 74 22 3a 66 61 6c 73 65 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 66 6f 72 6d 61 74 22 3a 22 77 6f 66 66 32 22 2c 22 69 73 4c 6f 63 61 6c 22 3a 66 61 6c 73 65 2c 22 75 72 6c 22 3a 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 63 61 76 65 61 74 2f 76 31 38 2f 57 6e 7a 6e 48 41 63 35 62 41 66 59 42 32 51 52 Data Ascii: :-300,"fsSelection":192,"lineGap":0,"ulCodePageRange1":151,"unitsPerEm":1000,"usWinAscent":974,"usWinDescent":315},"fontFamily":"Caveat","menuFont":false,"sources":[{"format":"woff2","isLocal":false,"url":"//fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QR
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: 32 22 7d 5d 2c 22 73 74 79 6c 65 22 3a 22 6e 6f 72 6d 61 6c 22 2c 22 73 75 62 73 65 74 22 3a 22 4c 41 54 49 4e 22 2c 22 73 75 62 73 65 74 56 61 6c 75 65 22 3a 22 6c 61 74 69 6e 22 2c 22 77 65 69 67 68 74 22 3a 35 30 30 2c 22 77 65 69 67 68 74 65 64 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 20 4d 65 64 69 75 6d 22 7d 2c 7b 22 66 6f 6e 74 44 72 61 77 53 69 7a 65 22 3a 7b 22 53 54 79 70 6f 41 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 53 54 79 70 6f 44 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 53 54 79 70 6f 4c 69 6e 65 47 61 70 22 3a 30 2c 22 61 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 63 6d 61 70 46 6f 72 6d 61 74 32 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 70 6f 69 6e 74 34 65 30 30 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 65 6e 64 65 72 Data Ascii: 2"}],"style":"normal","subset":"LATIN","subsetValue":"latin","weight":500,"weightedFontFamily":"Caveat Medium"},{"fontDrawSize":{"STypoAscender":960,"STypoDescender":-300,"STypoLineGap":0,"ascender":960,"cmapFormat2":false,"codepoint4e00":false,"descender
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: 67 65 52 61 6e 67 65 31 22 3a 31 35 31 2c 22 75 6e 69 74 73 50 65 72 45 6d 22 3a 31 30 30 30 2c 22 75 73 57 69 6e 41 73 63 65 6e 74 22 3a 39 37 34 2c 22 75 73 57 69 6e 44 65 73 63 65 6e 74 22 3a 33 31 35 7d 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 22 2c 22 6d 65 6e 75 46 6f 6e 74 22 3a 66 61 6c 73 65 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 66 6f 72 6d 61 74 22 3a 22 77 6f 66 66 32 22 2c 22 69 73 4c 6f 63 61 6c 22 3a 66 61 6c 73 65 2c 22 75 72 6c 22 3a 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 63 61 76 65 61 74 2f 76 31 38 2f 57 6e 7a 6e 48 41 63 35 62 41 66 59 42 32 51 52 61 68 37 70 63 70 4e 76 4f 78 2d 70 6a 53 78 36 65 49 47 70 59 51 2e 77 6f 66 66 32 22 7d 5d 2c 22 73 74 79 6c 65 22 3a 22 6e 6f 72 6d Data Ascii: geRange1":151,"unitsPerEm":1000,"usWinAscent":974,"usWinDescent":315},"fontFamily":"Caveat","menuFont":false,"sources":[{"format":"woff2","isLocal":false,"url":"//fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjSx6eIGpYQ.woff2"}],"style":"norm
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: 75 62 73 65 74 56 61 6c 75 65 22 3a 22 6c 61 74 69 6e 22 2c 22 77 65 69 67 68 74 22 3a 36 30 30 2c 22 77 65 69 67 68 74 65 64 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 20 53 65 6d 69 42 6f 6c 64 22 7d 2c 7b 22 66 6f 6e 74 44 72 61 77 53 69 7a 65 22 3a 7b 22 53 54 79 70 6f 41 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 53 54 79 70 6f 44 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 53 54 79 70 6f 4c 69 6e 65 47 61 70 22 3a 30 2c 22 61 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 63 6d 61 70 46 6f 72 6d 61 74 32 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 70 6f 69 6e 74 34 65 30 30 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 66 73 53 65 6c 65 63 74 69 6f 6e 22 3a 31 39 32 2c 22 6c 69 6e 65 47 61 70 22 3a 30 2c 22 75 Data Ascii: ubsetValue":"latin","weight":600,"weightedFontFamily":"Caveat SemiBold"},{"fontDrawSize":{"STypoAscender":960,"STypoDescender":-300,"STypoLineGap":0,"ascender":960,"cmapFormat2":false,"codepoint4e00":false,"descender":-300,"fsSelection":192,"lineGap":0,"u
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: 65 6e 74 22 3a 39 37 34 2c 22 75 73 57 69 6e 44 65 73 63 65 6e 74 22 3a 33 31 35 7d 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 43 61 76 65 61 74 22 2c 22 6d 65 6e 75 46 6f 6e 74 22 3a 66 61 6c 73 65 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 66 6f 72 6d 61 74 22 3a 22 77 6f 66 66 32 22 2c 22 69 73 4c 6f 63 61 6c 22 3a 66 61 6c 73 65 2c 22 75 72 6c 22 3a 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 63 61 76 65 61 74 2f 76 31 38 2f 57 6e 7a 6e 48 41 63 35 62 41 66 59 42 32 51 52 61 68 37 70 63 70 4e 76 4f 78 2d 70 6a 52 56 36 65 49 47 70 59 51 2e 77 6f 66 66 32 22 7d 5d 2c 22 73 74 79 6c 65 22 3a 22 6e 6f 72 6d 61 6c 22 2c 22 73 75 62 73 65 74 22 3a 22 43 59 52 49 4c 4c 49 43 22 2c 22 73 75 62 73 65 74 56 61 6c 75 65 22 3a 22 63 79 Data Ascii: ent":974,"usWinDescent":315},"fontFamily":"Caveat","menuFont":false,"sources":[{"format":"woff2","isLocal":false,"url":"//fonts.gstatic.com/s/caveat/v18/WnznHAc5bAfYB2QRah7pcpNvOx-pjRV6eIGpYQ.woff2"}],"style":"normal","subset":"CYRILLIC","subsetValue":"cy
2024-10-21 09:00:55 UTC	1378	IN	Data Raw: 69 6c 79 22 3a 22 43 61 76 65 61 74 20 42 6f 6c 64 22 7d 2c 7b 22 66 6f 6e 74 44 72 61 77 53 69 7a 65 22 3a 7b 22 53 54 79 70 6f 41 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 53 54 79 70 6f 44 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 53 54 79 70 6f 4c 69 6e 65 47 61 70 22 3a 30 2c 22 61 73 63 65 6e 64 65 72 22 3a 39 36 30 2c 22 63 6d 61 70 46 6f 72 6d 61 74 32 22 3a 66 61 6c 73 65 2c 22 63 6f 64 65 70 6f 69 6e 74 34 65 30 30 22 3a 66 61 6c 73 65 2c 22 64 65 73 63 65 6e 64 65 72 22 3a 2d 33 30 30 2c 22 66 73 53 65 6c 65 63 74 69 6f 6e 22 3a 31 36 30 2c 22 6c 69 6e 65 47 61 70 22 3a 30 2c 22 75 6c 43 6f 64 65 50 61 67 65 52 61 6e 67 65 31 22 3a 31 35 31 2c 22 75 6e 69 74 73 50 65 72 45 6d 22 3a 31 30 30 30 2c 22 75 73 57 69 6e 41 73 63 65 6e 74 22 3a Data Ascii: ily":"Caveat Bold"},{"fontDrawSize":{"STypoAscender":960,"STypoDescender":-300,"STypoLineGap":0,"ascender":960,"cmapFormat2":false,"codepoint4e00":false,"descender":-300,"fsSelection":160,"lineGap":0,"ulCodePageRange1":151,"unitsPerEm":1000,"usWinAscent":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49765	142.250.185.142	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:00:55 UTC	541	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://docs.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 09:00:56 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Mon, 21 Oct 2024 09:00:55 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49771	142.250.185.142	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:00:57 UTC	1005	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 4412 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=zMAsN-USReiBZWCmk_wUpgchwj_HoWndImrZCGPCatQyGStYpmyli9ar4YYyQN5MV47an_URnr_TNkXwBpapf71RxnTssEORYC1DMv3-HtFiZ6jJnROyBfN3mcZH5pZE4VNO8wvNPeimXIy_HilFro7ADMGf5Yvz5bSKSxZeM2D8Njuwaw
2024-10-21 09:00:57 UTC	4412	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 32 30 33 35 2c 5b 5b 22 31 37 32 39 35 30 31 32 35 33 33 30 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 37 32 39 35 30 31 32 35 33 33 30 35 30 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 37 32 39 35 30 31 32 35 33 33 30 35 30 30 30 5d 2c 6e 75 6c 6c 2c 31 5d 2c 6e 75 6c 6c 2c 37 31 36 2c 6e 75 6c 6c 2c 31 2c 31 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[4,0,0,0,0]]],2035,[["1729501253306",null,null,null,null,null,null,"[[[null,null,1,1729501253305000,null,null,null,[[1729501253305000],null,1],null,716,null,1,1
2024-10-21 09:00:57 UTC	936	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=vzSTR--EP2Rkc872NRfsjl6C1vkYCAG7V2j_HXTg37cWTGWqewR6hLwSCQ-HSlTw0j6ELp7nviOkm8hYfV7iZOMGGdVhhVAfqQvjY6vGpZAWK7Mm1YZru7O4iCdwB5J_DZaGpWvC63Y414HQU-iB3Dh-0ujZSfTDHQqqBITPjJVBpriZyIYyQPcJMA; expires=Tue, 22-Apr-2025 09:00:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Mon, 21 Oct 2024 09:00:57 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 21 Oct 2024 09:00:57 GMT Connection: close Transfer-Encoding: chunked
2024-10-21 09:00:57 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-21 09:00:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49778	142.250.185.142	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:00:58 UTC	1005	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 8144 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=zMAsN-USReiBZWCmk_wUpgchwj_HoWndImrZCGPCatQyGStYpmyli9ar4YYyQN5MV47an_URnr_TNkXwBpapf71RxnTssEORYC1DMv3-HtFiZ6jJnROyBfN3mcZH5pZE4VNO8wvNPeimXIy_HilFro7ADMGf5Yvz5bSKSxZeM2D8Njuwaw
2024-10-21 09:00:58 UTC	8144	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 32 30 33 35 2c 5b 5b 22 31 37 32 39 35 30 31 32 35 36 33 31 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],2035,[["1729501256311",null,null,null
2024-10-21 09:00:58 UTC	936	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://docs.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=bxHt4WO5_sV29nt4rFTs_OEeUQyEqyvXGhS0B8Fg_7gAdzbAudnn8jqiMcSuT6QmrDiKii4IeingYHtdLROTeMeo97Cw4HChmYa_ejcC71WT10bPP9ptFK_8qVl4SR5PV3Pr3zibCr8-qHMRBaUgpMejFZ-gakVkySrDRSRfJsx0_OeMI6WQv8O7Cg; expires=Tue, 22-Apr-2025 09:00:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Mon, 21 Oct 2024 09:00:58 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 21 Oct 2024 09:00:58 GMT Connection: close Transfer-Encoding: chunked
2024-10-21 09:00:58 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-21 09:00:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49779	142.250.185.206	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:00:58 UTC	1422	OUT	POST /forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/naLogImpressions HTTP/1.1 Host: docs.google.com Connection: keep-alive Content-Length: 10922 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-mobile: ?0 X-Client-Deadline-Ms: 20000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://docs.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docs.google.com/forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/viewform Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: S=spreadsheet_forms=g30FHL1t_D4lRnpGzJDx8jNEVbHITGCtpH_nD9q39A8; COMPASS=spreadsheet_forms=CjIACWuJV5OVrjCVPU0cvRjOgMYHeXD-JL08g72j8BIVcidKH18iK0CGAnQxoB0tCboSchDRzNi4Bho0AAlriVcyYGeNgQLJiOUBrqTURjl_CwsshAOFhsFwT2_jBUAEkDRrKETr31T9TEr2qo55Jw==; NID=518=zMAsN-USReiBZWCmk_wUpgchwj_HoWndImrZCGPCatQyGStYpmyli9ar4YYyQN5MV47an_URnr_TNkXwBpapf71RxnTssEORYC1DMv3-HtFiZ6jJnROyBfN3mcZH5pZE4VNO8wvNPeimXIy_HilFro7ADMGf5Yvz5bSKSxZeM2D8Njuwaw
2024-10-21 09:00:58 UTC	10922	OUT	Data Raw: 69 6d 70 72 65 73 73 69 6f 6e 42 61 74 63 68 3d 25 35 42 25 35 42 25 35 42 34 31 25 32 43 6e 75 6c 6c 25 32 43 32 25 32 43 31 37 32 39 35 30 31 32 35 33 33 37 36 30 30 30 25 32 43 25 35 42 25 35 42 25 35 42 31 32 38 30 25 32 43 39 30 37 25 32 43 31 32 38 30 25 32 43 39 38 34 25 35 44 25 32 43 66 61 6c 73 65 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 31 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 66 61 6c 73 65 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 66 61 6c 73 65 25 32 43 74 72 75 65 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c Data Ascii: impressionBatch=%5B%5B%5B41%2Cnull%2C2%2C1729501253376000%2C%5B%5B%5B1280%2C907%2C1280%2C984%5D%2Cfalse%2Cnull%2Cnull%2C1%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cfalse%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5Bfalse%2Ctrue%5D%2Cnull%2Cnull
2024-10-21 09:00:58 UTC	616	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 21 Oct 2024 09:00:58 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/forms/prod;script-src 'report-sample' 'nonce-BuqDvvruwX9R35Rpisv48w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval' Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49791	172.217.18.110	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:00:59 UTC	968	OUT	GET /forms/d/e/1FAIpQLSeosl99tYV3KV8jIMUimreRZjxW_h7xXREfcFbjnsdmd-sCjA/font/getmetadata HTTP/1.1 Host: docs.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: S=spreadsheet_forms=g30FHL1t_D4lRnpGzJDx8jNEVbHITGCtpH_nD9q39A8; COMPASS=spreadsheet_forms=CjIACWuJV5OVrjCVPU0cvRjOgMYHeXD-JL08g72j8BIVcidKH18iK0CGAnQxoB0tCboSchDRzNi4Bho0AAlriVcyYGeNgQLJiOUBrqTURjl_CwsshAOFhsFwT2_jBUAEkDRrKETr31T9TEr2qo55Jw==; NID=518=bxHt4WO5_sV29nt4rFTs_OEeUQyEqyvXGhS0B8Fg_7gAdzbAudnn8jqiMcSuT6QmrDiKii4IeingYHtdLROTeMeo97Cw4HChmYa_ejcC71WT10bPP9ptFK_8qVl4SR5PV3Pr3zibCr8-qHMRBaUgpMejFZ-gakVkySrDRSRfJsx0_OeMI6WQv8O7Cg
2024-10-21 09:01:00 UTC	903	IN	HTTP/1.1 400 Bad Request Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 21 Oct 2024 09:00:59 GMT Content-Type: text/html; charset=utf-8 x-chromium-appcache-fallback-override: disallow-fallback Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://csp.withgoogle.com/csp/forms/prod;script-src 'report-sample' 'nonce-hsv5RhKoeNKhgJZIgARzpg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-21 09:01:00 UTC	475	IN	Data Raw: 62 64 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 57 65 62 20 77 6f 72 64 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 70 72 65 73 65 6e 74 61 74 69 6f 6e 73 20 61 6e 64 20 73 70 72 65 61 64 73 68 65 65 74 73 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 3c Data Ascii: bdb<!DOCTYPE html><html lang="en"><head><meta name="description" content="Web word processing, presentations and spreadsheets"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=0"><
2024-10-21 09:01:00 UTC	1378	IN	Data Raw: 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6e 6f 6e 63 65 3d 22 63 62 78 41 38 34 73 4e 53 59 4b 5a 6e 72 48 39 4f 35 4a 52 30 67 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 63 62 78 41 38 34 73 4e 53 59 4b 5a 6e 72 48 39 4f 35 4a 52 30 67 22 3e 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2a 20 68 74 6d 6c 20 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2a 3a 66 69 72 73 74 2d 63 68 69 6c 64 2b 68 74 6d 6c 20 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f Data Ascii: stylesheet" type="text/css" nonce="cbxA84sNSYKZnrH9O5JR0g"><style nonce="cbxA84sNSYKZnrH9O5JR0g">.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-blo
2024-10-21 09:01:00 UTC	1189	IN	Data Raw: 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 30 25 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 6f 75 74 65 72 43 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 69 64 3d 22 69 6e 6e 65 72 43 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 2d 38 30 70 78 3b 22 3e 3c 64 69 76 20 69 64 3d 22 64 72 69 76 65 2d 6c 6f 67 6f 22 3e 3c 61 20 68 72 65 66 3d 22 2f 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 6f 63 73 2d 64 72 69 76 65 6c 6f 67 6f 2d 69 6d 67 22 20 74 69 74 6c 65 3d 22 47 6f 6f 67 6c 65 20 6c 6f 67 6f 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d Data Ascii: -weight: bold; line-height: 150%;}</style></head><body><div id="outerContainer"><div id="innerContainer"><div style="position: absolute; top: -80px;"><div id="drive-logo"><a href="/"><span class="docs-drivelogo-img" title="Google logo"></span><span class=
2024-10-21 09:01:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49792	142.250.185.206	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:00:59 UTC	679	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=bxHt4WO5_sV29nt4rFTs_OEeUQyEqyvXGhS0B8Fg_7gAdzbAudnn8jqiMcSuT6QmrDiKii4IeingYHtdLROTeMeo97Cw4HChmYa_ejcC71WT10bPP9ptFK_8qVl4SR5PV3Pr3zibCr8-qHMRBaUgpMejFZ-gakVkySrDRSRfJsx0_OeMI6WQv8O7Cg
2024-10-21 09:01:00 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 21 Oct 2024 09:00:59 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 09:01:00 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-21 09:01:00 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49799	142.250.185.206	443	3244	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:00 UTC	679	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=bxHt4WO5_sV29nt4rFTs_OEeUQyEqyvXGhS0B8Fg_7gAdzbAudnn8jqiMcSuT6QmrDiKii4IeingYHtdLROTeMeo97Cw4HChmYa_ejcC71WT10bPP9ptFK_8qVl4SR5PV3Pr3zibCr8-qHMRBaUgpMejFZ-gakVkySrDRSRfJsx0_OeMI6WQv8O7Cg
2024-10-21 09:01:01 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Mon, 21 Oct 2024 09:01:01 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-21 09:01:01 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-21 09:01:01 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49787	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:01 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cS9AprGcEg7pCdO&MD=KDLXwNkd HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-21 09:01:01 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: f3474b10-1685-43f3-96d2-56d916ae02f5 MS-RequestId: dceb9ab7-2967-45e6-9db2-27227fc4f74d MS-CV: KX8BKzSSY0yHSgB+.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 21 Oct 2024 09:01:00 GMT Connection: close Content-Length: 24490
2024-10-21 09:01:01 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-21 09:01:01 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	51413	52.165.164.15	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:17 UTC	142	OUT	GET /clientwebservice/ping HTTP/1.1 Connection: Keep-Alive User-Agent: DNS resiliency checker/1.0 Host: fe3cr.delivery.mp.microsoft.com
2024-10-21 09:01:17 UTC	234	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Date: Mon, 21 Oct 2024 09:01:16 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	51414	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:18 UTC	124	OUT	GET /sls/ping HTTP/1.1 Connection: Keep-Alive User-Agent: DNS resiliency checker/1.0 Host: slscr.update.microsoft.com
2024-10-21 09:01:18 UTC	318	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Expires: -1 MS-CV: ym1AJGCFH0i9Go8d.0 MS-RequestId: 19dd750d-ab78-4c88-a28e-63be2bb2b962 MS-CorrelationId: 03ceb811-d853-40c0-b3a6-aa66ba85a90a X-Content-Type-Options: nosniff Date: Mon, 21 Oct 2024 09:01:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	51415	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:20 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cS9AprGcEg7pCdO&MD=KDLXwNkd HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-21 09:01:20 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 985881c7-9d70-4f7f-bb6b-66decd1c99b5 MS-RequestId: 6b0f5096-135e-4cea-8adb-f2b382fcd0ae MS-CV: 6VWvaGs0P0Cbjkh4.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 21 Oct 2024 09:01:20 GMT Connection: close Content-Length: 24490
2024-10-21 09:01:20 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-21 09:01:20 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	51416	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:21 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cS9AprGcEg7pCdO&MD=KDLXwNkd HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-21 09:01:22 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 0ac97a5d-0ebc-4763-b748-e4c1adb1f580 MS-RequestId: 5ef14e2d-a6b0-4540-be45-25d29fda18a0 MS-CV: 6ccEy97/R0e8fR0k.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 21 Oct 2024 09:01:21 GMT Connection: close Content-Length: 30005
2024-10-21 09:01:22 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-21 09:01:22 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	51419	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:41 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:41 UTC	561	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:41 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 19 Oct 2024 17:01:38 GMT ETag: "0x8DCF05FB2860982" x-ms-request-id: 5d891a74-401e-000a-7550-234a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090141Z-r197bdfb6b42sc4ddemybqpm140000000fzg000000003m4t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:41 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-21 09:01:41 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-21 09:01:41 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-21 09:01:41 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-21 09:01:41 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-21 09:01:41 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-21 09:01:41 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-21 09:01:41 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-21 09:01:41 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-21 09:01:41 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	51420	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:42 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:42 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:42 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: b8a73167-901e-0015-0f59-23b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090142Z-15b8d89586fdmfsgn8gw8tkkbc000000096g000000006y5r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:42 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	51423	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:42 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:42 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:42 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090142Z-16849878b7842t5ke0k7mzbt3c00000002wg00000000238g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:42 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	51421	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:42 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:42 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:42 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 509f9858-c01e-00a2-4459-232327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090142Z-15b8d89586fvk4kme36hucfwyc00000008b000000000a5yr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:42 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	51424	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:42 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:42 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090142Z-16849878b7862vlcc7m66axrs0000000032g0000000028v3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:42 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	51422	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:42 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:42 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9f958f93-601e-0032-0256-23eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090142Z-r197bdfb6b4qpk6v9629ad4b5s00000007mg00000000503k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:42 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	51425	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:43 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:43 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090143Z-16849878b787c9z7hb8u9yysp00000000340000000003uaz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:43 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	51428	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:43 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:43 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0a92035d-201e-00aa-57da-213928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090143Z-16849878b7862vlcc7m66axrs000000003100000000052xn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:43 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	51426	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:43 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:43 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090143Z-16849878b7862vlcc7m66axrs000000002z0000000009b3c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:43 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	51427	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:43 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:43 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 789ebf3f-701e-006f-4659-23afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090143Z-r197bdfb6b46gt25cvgp1aw0w800000007n0000000002ggd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:43 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	51429	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:43 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:43 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: bcb88dd7-c01e-0079-47cd-21e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090143Z-16849878b7842t5ke0k7mzbt3c00000002qg00000000ebw8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:43 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	51430	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:44 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:44 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: bac56044-101e-0079-505d-235913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090144Z-15b8d89586fsx9lfqmgrbzpgmg00000009b000000000byat x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:44 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	51432	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:44 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:44 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: a48fb397-901e-008f-6356-2367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090144Z-15b8d89586f4zwgbz365q03b0c00000009cg00000000823v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:44 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	51431	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:44 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:44 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: dea3e99f-801e-0083-5056-23f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090144Z-r197bdfb6b4tq6ld2w31u8wmcc0000000fz0000000004c6r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:44 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	51433	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:44 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:44 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a524b24e-501e-0078-5259-2306cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090144Z-r197bdfb6b4rt57kw3q0f43mqg000000071000000000d9av x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:44 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	51434	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:44 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:44 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090144Z-16849878b78fmrkt2ukpvh9wh400000002xg000000007bht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:44 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	51435	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:45 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:45 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 9e5c4ad8-f01e-001f-1456-235dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090145Z-r197bdfb6b4sn8wg20e97vn7ps0000000fz00000000042y9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:45 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	51437	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:45 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:45 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4519f6ad-501e-0029-5350-23d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090145Z-r197bdfb6b4kkrkjmxpfy2et100000000fvg00000000cgma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:45 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	51436	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:45 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:45 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 5e1d4904-301e-0020-1550-236299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090145Z-15b8d89586f8l5961kfst8fpb000000004kg000000001weu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:45 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	51438	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:45 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:45 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ec40f21c-901e-0067-494d-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090145Z-16849878b78jfqwd1dsrhqg3aw000000033g000000004g2w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:45 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	51439	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:45 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:45 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1c1a6b29-f01e-0096-0e50-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090145Z-15b8d89586fx2hlt035xdehq5800000009c000000000am6v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:45 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	51440	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:46 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: a019224c-501e-0047-645d-23ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090146Z-15b8d89586fst84k5f3z220tec000000098g00000000d2k5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	51441	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:46 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:46 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 5fceb8c4-d01e-008e-7050-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090146Z-r197bdfb6b4kzncfk35mqx2yu40000000fug000000004mey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:46 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	51442	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:46 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:46 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bb725c57-501e-005b-0eab-21d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090146Z-16849878b78bkvbz1ry47zvsas00000002y000000000akwf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:46 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	51443	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:46 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:46 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 8ee7b399-e01e-0033-0c50-234695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090146Z-15b8d89586flzzksd4nk2msxr400000008r0000000004hkb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:46 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	51444	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:46 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:46 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 393bb9bf-001e-0028-2805-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090146Z-16849878b786vsxz21496wc2qn0000000360000000000228 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:46 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	51446	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:46 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:47 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: fc321564-a01e-003d-7450-2398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090147Z-r197bdfb6b42sc4ddemybqpm140000000fy0000000005rub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:47 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	51447	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:46 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:46 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090146Z-16849878b78dsttbr1qw36rxs800000002z0000000008b57 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:47 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	51448	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:47 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:47 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 58585528-701e-000d-4f7a-236de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090147Z-15b8d89586fwzdd8urmg0p1ebs00000004f0000000007ans x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:47 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	51450	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:47 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:47 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: b6938447-401e-008c-5750-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090147Z-r197bdfb6b429k2srg5tfm6hnn00000006x0000000001bdp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:47 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	51451	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:47 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:47 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090147Z-16849878b78dsttbr1qw36rxs800000002xg00000000b25u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:47 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	51452	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:47 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:47 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090147Z-16849878b785g992cz2s9gk35c00000002x000000000c1bk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:47 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	51453	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:47 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:47 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090147Z-16849878b787psctgubawhx7k800000002ug0000000068qr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:48 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	51454	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:48 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:48 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b7e83b8e-501e-005b-8056-23d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090148Z-r197bdfb6b42sc4ddemybqpm140000000g00000000002t7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:48 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	51449	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:48 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:48 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 26284338-e01e-0052-664d-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090148Z-16849878b78k8q5pxkgux3mbgg00000002yg000000006sg5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:48 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	51456	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:48 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:48 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: ad3e5457-301e-0099-155a-236683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090148Z-15b8d89586fcvr6pym2snavm4w00000009c000000000c05b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:48 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	51457	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:48 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:48 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 95a4abee-901e-0016-6e50-23efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090148Z-15b8d89586ffsjj9k4kx5hcf3w000000098g000000002ux1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:48 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	51455	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:48 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:48 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090148Z-16849878b787c9z7hb8u9yysp000000002z000000000dasd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:48 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	51458	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:48 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:49 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: d9d4df84-d01e-00ad-0964-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090149Z-15b8d89586fzhrwg5nzgg1z60000000009d00000000078xp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:49 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	51459	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:49 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:49 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 07f9ef03-d01e-0014-614d-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090149Z-16849878b78rjhv97f3nhawr7s00000002y00000000068ga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:49 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	51462	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:49 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:49 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 3e897e27-701e-006f-014d-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090149Z-16849878b784cpcc2dr9ch74ng00000003100000000092wx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:49 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	51460	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:49 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:49 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: d9c1e6f5-d01e-00ad-385d-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090149Z-r197bdfb6b46gt25cvgp1aw0w800000007fg000000009tvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:49 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	51461	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:49 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:49 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f6d2fe15-801e-007b-74f2-21e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090149Z-16849878b78hz7zj8u0h2zng140000000310000000008613 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:49 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	51463	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:49 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:49 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0c1e418e-701e-0021-2a50-233d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090149Z-15b8d89586f6nn8zwfkdy3t04s000000095g00000000azze x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:49 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	51464	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:50 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:50 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:50 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090150Z-16849878b78k8q5pxkgux3mbgg000000030g000000002rkp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:50 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	51465	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:50 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:50 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090150Z-16849878b78fmrkt2ukpvh9wh400000002vg00000000bhp0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:50 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	51467	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:50 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:50 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:50 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 475be468-701e-0001-466b-23b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090150Z-r197bdfb6b4ld6jca8vdwzkams000000046g000000009k8p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:50 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	51468	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:50 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:50 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:50 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 629c9caa-001e-0079-2150-2312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090150Z-15b8d89586f6nn8zwfkdy3t04s0000000970000000007cnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:50 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	51470	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:51 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:51 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:51 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2653a72e-001e-005a-26e6-21c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090151Z-16849878b787sbpl0sv29sm89s0000000310000000008vur x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:51 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	51472	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:51 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:51 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:51 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b6a35dc4-401e-008c-3156-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090151Z-15b8d89586fwzdd8urmg0p1ebs00000004h000000000452e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:51 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	51466	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:51 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:51 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:51 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f651688a-e01e-0071-5b56-2308e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090151Z-15b8d89586fx2hlt035xdehq5800000009gg0000000033ux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:51 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	51471	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:51 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:51 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:51 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 531fb3e5-001e-00a2-2356-23d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090151Z-r197bdfb6b49k6rshrw4zhxpu00000000fu0000000008c7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:51 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	51473	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:51 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:51 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7fcc546d-701e-001e-80a3-21f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090151Z-16849878b78jfqwd1dsrhqg3aw000000031g000000008d4n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:51 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	51478	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:52 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:52 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 7cfbc72c-d01e-0082-6d55-22e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090152Z-16849878b787psctgubawhx7k800000002rg00000000ck86 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:52 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	51475	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:52 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:52 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:52 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c3928cc9-e01e-001f-405a-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090152Z-r197bdfb6b49q495mwyebb3r6s00000005w0000000003fqp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:52 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	51477	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:52 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:52 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:52 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: a956deb4-e01e-0020-285a-23de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090152Z-r197bdfb6b4h2vctng0a0nubg8000000061g0000000062df x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:52 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	51476	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:52 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:52 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:52 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 09cb71da-201e-0033-6911-22b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090152Z-16849878b78q7vdcwmryzsh7bg000000030000000000bb3p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:52 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	51474	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:52 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:52 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:52 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14f65908-801e-008f-32d6-202c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090152Z-16849878b786vsxz21496wc2qn000000030g000000009wx2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:52 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	51481	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:53 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:53 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 136ec9d9-a01e-0053-3798-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090153Z-16849878b7842t5ke0k7mzbt3c00000002q000000000dr26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:53 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	51479	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:53 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:53 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: c5fd2dd2-301e-0096-4150-23e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090153Z-r197bdfb6b4h2vctng0a0nubg800000005zg00000000a3ph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:53 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	51483	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:53 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:53 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:53 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: fc76d5e5-a01e-003d-2e6c-2398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090153Z-15b8d89586f42m67uh3prmsdrs00000009e0000000009pt2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:53 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	51480	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:53 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:53 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: a9267c5d-101e-0017-2156-2347c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090153Z-r197bdfb6b4qpk6v9629ad4b5s00000007g000000000a48p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:53 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	51482	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:53 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:53 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:53 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 143ffe56-901e-0067-3a0b-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090153Z-16849878b7842t5ke0k7mzbt3c00000002vg000000004zb2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:53 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	51485	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:54 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:54 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090154Z-16849878b787psctgubawhx7k800000002wg000000002ccq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:54 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	51484	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:54 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:54 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: c0884099-101e-0046-3a40-2291b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090154Z-16849878b78hz7zj8u0h2zng140000000320000000007az2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:54 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	51488	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:54 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:54 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: fa910cef-e01e-003c-72dd-21c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090154Z-16849878b782558xg5kpzay6es00000002x0000000008xsq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:54 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	51486	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:54 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:54 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:54 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 3a5eb15a-101e-007a-6d5d-23047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090154Z-r197bdfb6b4lbgfqheuaxfm7xn0000000bzg00000000c2hn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:54 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	51487	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:54 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090154Z-16849878b78ngdnlw4w0762cms000000034g000000002816 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	51489	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:55 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:55 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:55 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 37f3176e-001e-0082-5159-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090155Z-15b8d89586flspj6f2320qac9400000009e0000000003m8c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:55 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	51490	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:55 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:55 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:55 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090155Z-16849878b78p6ttkmyustyrk8s00000002s000000000ewyv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:55 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	51492	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:55 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:55 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 0fafa3ff-301e-0051-1f59-2338bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090155Z-r197bdfb6b4ld6jca8vdwzkams000000047g000000007vvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:55 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	51491	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:55 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:55 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: f6dc6d47-401e-0029-6759-239b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090155Z-r197bdfb6b4r9fwfyb63s04k3n000000040g000000001y3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:55 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	51493	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:55 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:55 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090155Z-16849878b787psctgubawhx7k800000002vg0000000041mc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:55 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	51495	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:56 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:56 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7699e86-701e-0050-405d-236767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090156Z-15b8d89586fmhkw4gksnr1w3ds00000009c0000000006g68 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:56 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	51496	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:56 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:56 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:56 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: ec87b83f-a01e-0053-3f64-238603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090156Z-15b8d89586fzhrwg5nzgg1z60000000009h0000000000faw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:56 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	51497	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:56 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:56 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:56 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090156Z-16849878b7862vlcc7m66axrs000000002y000000000b32e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:56 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	51498	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:56 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:56 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8c481607-b01e-0053-3f2b-21cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090156Z-16849878b78gvgmlcfru6nuc540000000300000000003f09 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:56 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	51499	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:56 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:56 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:56 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090156Z-16849878b78k8q5pxkgux3mbgg000000031g000000000ehv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:56 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	51501	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:57 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:57 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:57 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 3ee1fb64-201e-00aa-2159-233928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090157Z-15b8d89586fbt6nfd56ex08ru400000009k00000000011m3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:57 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	51502	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:57 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:57 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 9175aec4-101e-0028-2a56-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090157Z-15b8d89586fst84k5f3z220tec00000009f0000000001vfr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:57 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	51503	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:57 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:57 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: aaf6fada-701e-0053-683a-223a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090157Z-16849878b78s2lqfdex4tmpp7800000002wg00000000cxv4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:57 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	51504	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:57 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:57 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: aaa69ab3-801e-0047-5050-237265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090157Z-15b8d89586f6nn8zwfkdy3t04s00000009bg0000000000kr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:57 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	51505	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:57 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:57 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090157Z-16849878b78q7vdcwmryzsh7bg000000030g0000000093p3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:57 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	51506	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:58 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:58 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 531fbc2e-001e-00a2-4f56-23d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090158Z-r197bdfb6b4r9fwfyb63s04k3n00000003u000000000e6wy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:58 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	51509	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:58 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:58 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1f9beeb1-d01e-0014-170b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090158Z-16849878b787psctgubawhx7k800000002ug0000000068zg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:58 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	51510	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:58 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:58 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 37f3233a-001e-0082-4c59-235880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090158Z-15b8d89586f4zwgbz365q03b0c00000009g0000000002fu6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:58 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	51508	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:58 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:58 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: def51322-301e-0000-4b50-23eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090158Z-r197bdfb6b4kkm84kpepthehx4000000032000000000983f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:58 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	51507	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:58 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:58 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 48cb41bd-401e-0064-5c64-2354af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090158Z-15b8d89586flspj6f2320qac9400000009ag000000009ek1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:58 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	51511	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:59 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:59 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 14811fc9-901e-0016-298e-21efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090159Z-16849878b788tnsxzb2smucwdc0000000320000000003awd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:01:59 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	51513	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:59 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:59 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 06a6de3a-901e-002a-7f50-237a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090159Z-r197bdfb6b46gt25cvgp1aw0w800000007n0000000002gvs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:59 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	51515	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:59 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:59 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: a64cfeb6-d01e-002b-3b59-2325fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090159Z-r197bdfb6b4rt57kw3q0f43mqg000000076g0000000039v7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:59 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	51512	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:59 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:59 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6dbd05ca-401e-0078-0659-234d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090159Z-15b8d89586fnsf5zv100scmx10000000096000000000aaxc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:59 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	51514	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:01:59 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:01:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:01:59 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 44b68622-401e-0067-4450-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090159Z-15b8d89586fst84k5f3z220tec00000009cg000000005qxw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:01:59 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	51516	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:00 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:00 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:00 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: ea8cbb86-601e-003e-675a-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090200Z-r197bdfb6b42sc4ddemybqpm140000000g10000000001z7v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:00 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	51517	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:00 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:00 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:00 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 31e4fe8c-301e-0033-38f2-21fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090200Z-16849878b78jfqwd1dsrhqg3aw000000034g000000002th6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:00 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	51518	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:00 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:00 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:00 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090200Z-16849878b785jsrm4477mv3ezn00000002yg000000005x4h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:00 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	51519	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:00 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:00 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:00 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2a979a5c-f01e-003f-77f7-21d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090200Z-16849878b78fmrkt2ukpvh9wh400000002ug00000000ebdn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:00 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	51520	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:00 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:00 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:00 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: e092e42d-501e-0035-603a-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090200Z-16849878b78c2tmb7nhatnd68s00000002zg0000000078h0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:00 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	51523	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:00 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:01 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:00 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090200Z-16849878b782558xg5kpzay6es00000002vg00000000bnd1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:01 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	51522	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:00 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:01 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:00 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 20c48ab5-a01e-0084-1850-239ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090200Z-r197bdfb6b4rt57kw3q0f43mqg000000071g00000000d1vu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:01 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	51521	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:00 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:01 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:00 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: cbb0b495-901e-005b-56e4-212005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090200Z-16849878b78z5q7jpbgf6e9mcw000000032g000000005xv0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:01 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	51524	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:00 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:01 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:01 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 53105191-001e-00a2-1650-23d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090201Z-r197bdfb6b4ld6jca8vdwzkams000000047g000000007vzs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:01 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	51525	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:00 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:01 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:01 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0efe6ec1-b01e-0053-7d56-23cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090201Z-15b8d89586fvk4kme36hucfwyc00000008hg0000000002rz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:01 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	51528	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:01 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:01 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:01 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ae1fa6eb-001e-008d-6556-23d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090201Z-r197bdfb6b4rt57kw3q0f43mqg0000000730000000009422 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:02:01 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	51529	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:01 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:01 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:01 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 886919fc-301e-005d-2f56-23e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090201Z-r197bdfb6b4lbgfqheuaxfm7xn0000000bz000000000dx9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:02:01 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	51526	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:01 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:01 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:01 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: cc75a80d-201e-0096-720b-22ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090201Z-16849878b78plcdqu15wsb886400000002w000000000agc6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:01 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	51527	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:01 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:01 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:01 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090201Z-16849878b785f8wh85a0w3ennn00000002xg000000007nxn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:01 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	51530	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:01 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:01 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:01 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 5fcede2c-d01e-008e-0350-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090201Z-r197bdfb6b4kkrkjmxpfy2et100000000fxg00000000ap2h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:01 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	51531	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:02 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:02 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:02 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a4c96680-901e-008f-156c-2367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090202Z-15b8d89586fvk4kme36hucfwyc00000008dg000000005w07 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:02:02 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	51532	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:02 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:02 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:02 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090202Z-16849878b78c2tmb7nhatnd68s0000000330000000001agz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:02 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	51534	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:02 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:02 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:02 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f5f98d55-001e-0049-58e4-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090202Z-16849878b788tnsxzb2smucwdc00000002zg000000008n29 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:02 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	51533	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:02 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:02 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:02 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9f7c1011-d01e-0065-1a3b-22b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090202Z-16849878b78c5zx4gw8tcga1b400000002xg000000003rf8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:02 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	51535	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:02 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:02 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:02 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c39b20d8-e01e-001f-4a5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090202Z-15b8d89586fbt6nfd56ex08ru400000009cg000000009mc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:02:02 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	51536	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:03 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:03 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:03 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090203Z-16849878b785jsrm4477mv3ezn0000000300000000002w4e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:03 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	51537	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:03 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:03 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:03 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090203Z-16849878b78q4pnrt955f8nkx800000002t000000000c4za x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:03 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	51538	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:03 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:03 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:03 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 95a93193-601e-0050-6b5d-232c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090203Z-r197bdfb6b4ld6jca8vdwzkams00000004b0000000001p25 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:02:03 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	51539	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:03 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:03 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:03 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 4e9f4159-f01e-005d-3228-2113ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090203Z-16849878b789m94j7902zfvfr000000002sg00000000dwub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:03 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	51540	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:03 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:03 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:03 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 728679af-d01e-007a-566c-23f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090203Z-15b8d89586f42m67uh3prmsdrs00000009e0000000009q0y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:03 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	51541	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:04 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:04 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:04 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 9015fec5-201e-0051-5e56-237340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090204Z-r197bdfb6b487xlkrahepdse5000000004fg000000000rek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:02:04 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	51542	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:04 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:04 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:04 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 6483513f-901e-007b-5e50-23ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090204Z-r197bdfb6b4qpk6v9629ad4b5s00000007k0000000008cw3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:02:04 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	51544	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:04 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:04 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:04 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 4481152a-601e-0001-4b55-22faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090204Z-16849878b78bkvbz1ry47zvsas0000000330000000001c8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:02:04 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	51545	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:04 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:04 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:04 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 8b373834-501e-008c-26e4-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090204Z-16849878b78dghrpt8v731n7r400000002zg0000000007qp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:04 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	51543	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:04 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:04 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:04 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 90f594d0-e01e-0003-5056-230fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090204Z-15b8d89586fdmfsgn8gw8tkkbc00000009ag000000000nxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:04 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	51546	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:05 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:05 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:05 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0b335c04-001e-0049-76aa-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090205Z-16849878b78dkr6tqerbnpg1zc00000002wg00000000druv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:05 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	51547	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:05 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:05 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:05 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: f598246b-b01e-0002-2f5d-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090205Z-r197bdfb6b4kq4j5t834fh90qn00000005t000000000am6b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:05 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	51549	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:05 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:05 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:05 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: e081a540-501e-0035-2133-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090205Z-16849878b785f8wh85a0w3ennn00000002u000000000f0ss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:05 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	51548	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:05 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:05 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:05 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 775b92fa-a01e-0070-3550-23573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090205Z-r197bdfb6b429k2srg5tfm6hnn00000006rg00000000b4gp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:02:05 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	51550	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:05 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:05 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:05 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: ce674b06-f01e-0052-7d0b-229224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090205Z-16849878b788tnsxzb2smucwdc00000002w000000000gmsh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:05 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	51551	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:06 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:06 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:06 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 07658eab-b01e-005c-1e14-224c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090206Z-16849878b78c2tmb7nhatnd68s0000000320000000003q61 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 09:02:06 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	51553	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 09:02:06 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 09:02:06 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 09:02:06 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 5fe4c9d5-d01e-008e-1959-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T090206Z-15b8d89586ffsjj9k4kx5hcf3w0000000940000000009fe4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 09:02:06 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Target ID:	0
Start time:	05:00:39
Start date:	21/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:00:44
Start date:	21/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2524,i,986314333724332850,16836519362287794161,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:00:46
Start date:	21/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://forms.gle/sxFUT7YRxjaFsuNq6"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://forms.gle/sxFUT7YRxjaFsuNq6

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Windows Analysis Report
https://forms.gle/sxFUT7YRxjaFsuNq6