Edit tour

Windows Analysis Report
https://go.microsoft.com/fwlink/?LinkId=521839

Overview

General Information

Sample URL:	https://go.microsoft.com/fwlink/?LinkId=521839
Analysis ID:	1540399
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3576 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5884 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1992,i,8530768926833369009,6162970178255102418,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5780 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://go.microsoft.com/fwlink/?LinkId=521839" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49793 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49974 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49793 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yTWkex4NXVntyPx&MD=271To5Sy HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yTWkex4NXVntyPx&MD=271To5Sy HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: d.impactradius-event.com
Source: global traffic	DNS traffic detected: DNS query: cdnssl.clicktale.net
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: c.s-microsoft.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mem.gfx.ms
Source: global traffic	DNS traffic detected: DNS query: lptag.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: lpcdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: accdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: publisher.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms

Source: chromecache_108.2.dr, chromecache_140.2.dr, chromecache_126.2.dr, chromecache_115.2.dr, chromecache_113.2.dr, chromecache_158.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_165.2.dr, chromecache_143.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_134.2.dr, chromecache_122.2.dr	String found in binary or memory: https://axios-http.com
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=12681
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3334
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://bugzil.la/548397
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=277178
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=308064
Source: chromecache_157.2.dr	String found in binary or memory: https://dev.azure.com/mscomdev/Moray/_workitems/edit/4494
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://elad.medium.com/css-position-sticky-how-it-really-works-54cd01dc2d46
Source: chromecache_134.2.dr, chromecache_122.2.dr	String found in binary or memory: https://github.com/axios/axios.git
Source: chromecache_134.2.dr, chromecache_122.2.dr	String found in binary or memory: https://github.com/axios/axios/issues
Source: chromecache_125.2.dr, chromecache_116.2.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/es-shims/es5-shim/issues/150
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/kitcambridge/es5-shim/commit/4f738ac066346
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/mozilla/rhino/issues/346
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/tc39/proposal-array-filtering
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/w3c/aria-practices/pull/1757
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.26.0/LICENSE
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.27.2/LICENSE
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1128
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1130
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/475
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/677
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://javascript.info/size-and-scroll-window#width-height-of-the-document
Source: chromecache_137.2.dr, chromecache_154.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_137.2.dr, chromecache_154.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_137.2.dr, chromecache_154.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://keycode.info/table-of-all-keycodes
Source: chromecache_146.2.dr, chromecache_120.2.dr	String found in binary or memory: https://login.live.com/Me.srf?wa
Source: chromecache_146.2.dr, chromecache_120.2.dr	String found in binary or memory: https://login.microsoftonline.com/forgetuser
Source: chromecache_146.2.dr, chromecache_120.2.dr	String found in binary or memory: https://login.microsoftonline.com/savedusers?appid
Source: chromecache_120.2.dr	String found in binary or memory: https://login.microsoftonline.com/uxlogout?appid
Source: chromecache_134.2.dr, chromecache_122.2.dr	String found in binary or memory: https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/
Source: chromecache_137.2.dr, chromecache_154.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype-
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.every
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.filter
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.find
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.findIndex
Source: chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.foreach
Source: chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.includes
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.indexof
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.map
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.push
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.some
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.splice
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-arrayspeciescreate
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-getmethod
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-hasownproperty
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isarray
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-iscallable
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isconstructor
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isregexp
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-lengthofarraylike
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-math.trunc
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.create
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperties
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperty
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.entries
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertydescriptor
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertynames
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.keys
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.tostring
Source: chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.values
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-ordinarytoprimitive
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-parseint-string-radix
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-requireobjectcoercible
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.includes
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trim
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimend
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimstart
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tointegerorinfinity
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tolength
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toobject
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toprimitive
Source: chromecache_133.2.dr, chromecache_157.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-topropertykey

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49974 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/107@24/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1992,i,8530768926833369009,6162970178255102418,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://go.microsoft.com/fwlink/?LinkId=521839"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1992,i,8530768926833369009,6162970178255102418,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://jquery.org/license	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://js.foundation/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
publisher.liveperson.net	34.120.154.120	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
d.impactradius-event.com	35.186.249.72	true	false	unknown
d1xbuscas8tetl.cloudfront.net	108.138.7.18	true	false	unknown
ax-0001.ax-msedge.net	150.171.28.10	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
js.monitor.azure.com	unknown	unknown	false	unknown
lpcdn.lpsnmedia.net	unknown	unknown	false	unknown
c.s-microsoft.com	unknown	unknown	false	unknown
accdn.lpsnmedia.net	unknown	unknown	false	unknown
www.clarity.ms	unknown	unknown	false	unknown
analytics.tiktok.com	unknown	unknown	false	unknown
cdnssl.clicktale.net	unknown	unknown	false	unknown
lptag.liveperson.net	unknown	unknown	false	unknown
mem.gfx.ms	unknown	unknown	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://login.microsoftonline.com/uxlogout?appid	chromecache_120.2.dr	false		unknown
https://github.com/zloirock/core-js/blob/v3.26.0/LICENSE	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.prototype.tostring	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-toobject	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-arrayspeciescreate	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://bugzil.la/548397	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.values	chromecache_157.2.dr	false		unknown
https://github.com/carhartl/jquery-cookie	chromecache_125.2.dr, chromecache_116.2.dr	false		unknown
https://tc39.es/ecma262/#sec-lengthofarraylike	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-iscallable	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://github.com/zloirock/core-js	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/1128	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://login.microsoftonline.com/savedusers?appid	chromecache_146.2.dr, chromecache_120.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.includes	chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.defineproperty	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.push	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-string.prototype.trim	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://bugs.chromium.org/p/v8/issues/detail?id=12681	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/	chromecache_134.2.dr, chromecache_122.2.dr	false		unknown
https://tc39.es/ecma262/#sec-hasownproperty	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-math.trunc	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://github.com/tc39/proposal-array-filtering	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=277178	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=308064	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.filter	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.splice	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.defineproperties	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.entries	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.find	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.keys	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-tointegerorinfinity	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-requireobjectcoercible	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-string.prototype.trimend	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://github.com/es-shims/es5-shim/issues/150	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://github.com/w3c/aria-practices/pull/1757	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
http://github.com/requirejs/almond/LICENSE	chromecache_108.2.dr, chromecache_140.2.dr, chromecache_126.2.dr, chromecache_115.2.dr, chromecache_113.2.dr, chromecache_158.2.dr	false		unknown
https://axios-http.com	chromecache_134.2.dr, chromecache_122.2.dr	false		unknown
https://github.com/kitcambridge/es5-shim/commit/4f738ac066346	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://login.microsoftonline.com/forgetuser	chromecache_146.2.dr, chromecache_120.2.dr	false		unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_165.2.dr, chromecache_143.2.dr	false		unknown
https://keycode.info/table-of-all-keycodes	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.every	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-getmethod	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-toprimitive	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://github.com/axios/axios.git	chromecache_134.2.dr, chromecache_122.2.dr	false		unknown
https://tc39.es/ecma262/#sec-isconstructor	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-topropertykey	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://dev.azure.com/mscomdev/Moray/_workitems/edit/4494	chromecache_157.2.dr	false		unknown
https://github.com/axios/axios/issues	chromecache_134.2.dr, chromecache_122.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.findIndex	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://elad.medium.com/css-position-sticky-how-it-really-works-54cd01dc2d46	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-parseint-string-radix	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-string.prototype.includes	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://jquery.org/license	chromecache_137.2.dr, chromecache_154.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/v8/issues/detail?id=3334	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/1130	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://jquery.com/	chromecache_137.2.dr, chromecache_154.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-object.getownpropertynames	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://javascript.info/size-and-scroll-window#width-height-of-the-document	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.map	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.indexof	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-tolength	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype-	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-object.create	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-array.prototype.some	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-isarray	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	chromecache_133.2.dr, chromecache_157.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.foreach	chromecache_157.2.dr	false		unknown
https://tc39.es/ecma262/#sec-string.prototype.trimstart	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://github.com/zloirock/core-js/blob/v3.27.2/LICENSE	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/86#issuecomment-115759028	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/677	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://sizzlejs.com/	chromecache_137.2.dr, chromecache_154.2.dr	false	URL Reputation: safe	unknown
https://js.foundation/	chromecache_137.2.dr, chromecache_154.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-ordinarytoprimitive	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/475	chromecache_133.2.dr, chromecache_157.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
108.138.7.18	d1xbuscas8tetl.cloudfront.net	United States	16509	AMAZON-02US	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.253.45	s-part-0017.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.186.249.72	d.impactradius-event.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540399
Start date and time:	2024-10-23 18:29:33 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://go.microsoft.com/fwlink/?LinkId=521839
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/107@24/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 108.177.15.84, 142.250.186.174, 142.250.74.195, 34.104.35.123, 2.19.246.123, 88.221.169.152, 2.18.64.21, 2.18.64.20, 88.221.110.176, 88.221.110.179, 2.18.64.15, 2.18.64.26, 184.28.89.233, 178.249.97.99, 178.249.97.23, 34.120.154.120, 52.167.30.171, 2.16.164.11, 2.16.164.83, 93.184.221.240, 192.229.221.95, 52.165.164.15, 13.85.23.206, 13.95.31.18, 142.250.186.99, 2.16.100.168
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://go.microsoft.com/fwlink/?LinkId=521839

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://www.microsoft.com/en-us/privacy/privacystatement Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "To view secured document, click here", "prominent_button_name": "Click here to view document", "text_input_field_labels": [ "Email Address", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.microsoft.com/en-us/privacy/privacystatement Model: claude-3-haiku-20240307	```json { "brands": [ "Microsoft" ] }
	```json { "brands": [ "Microsoft" ] }
URL: https://www.microsoft.com/en-us/privacy/privacystatement Model: gpt-4o	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'www.microsoft.com' matches the legitimate domain name for the brand 'Microsoft'.", "Microsoft is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email Address' and 'Password' are typical for a login page, which is common for a legitimate Microsoft service." ], "riskscore": 1}
URL: www.microsoft.com Brands: Microsoft Input Fields: Email Address, Password
URL: https://www.microsoft.com/en-us/privacy/updates Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "To view secured document, click here", "prominent_button_name": "Click here to view document", "text_input_field_labels": [ "Email Address", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": true, "has_visible_qrcode": false }

URL: https://www.microsoft.com/en-us/privacy/updates Model: claude-3-haiku-20240307	```json { "brands": [ "Microsoft" ] }
	```json { "brands": [ "Microsoft" ] }
URL: https://www.microsoft.com/en-us/privacy/updates Model: gpt-4o	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'www.microsoft.com' matches the legitimate domain name for the brand 'Microsoft'.", "Microsoft is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email Address' and 'Password' are typical for a login page, which is common for a legitimate Microsoft service." ], "riskscore": 1}
URL: www.microsoft.com Brands: Microsoft Input Fields: Email Address, Password

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 15:30:33 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9734334849406885
Encrypted:	false
SSDEEP:	48:8AdxT59FHsidAKZdA19ehwiZUklqehsJy+3:8CrEBJy
MD5:	BD6EC50A01630269D7395515FB97FEE4
SHA1:	BFCC4B3F7FE01B196F69B05C55C8E7EABC31A50D
SHA-256:	F9CDFFB1E22128B6306B47537D453E76A0A4DE254298B3C1538D994D09831EB9
SHA-512:	CE26C435CC64710230E386F6D225A6C317B84966813F3153E8460D54DD48376FBC8DAB1528DC3F7E2EFEAC4A5A02A48FBFFBAE33CB4F1A2EFB98B44273407BED
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....;.:.h%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IWY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Y..t.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 15:30:33 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.990171127152343
Encrypted:	false
SSDEEP:	48:8XMdxT59FHsidAKZdA1weh/iZUkAQkqehxJy+2:8ur29Q+Jy
MD5:	E251136956FCE8C5659231B79972202E
SHA1:	543F9CF6A0A0E10E5306D7C073AE09769B64D68A
SHA-256:	10742457CAB2D8502CC54EA4F0F14553DB0BE0DC975B00EC5EB4FBE6237624E0
SHA-512:	813331E9680BA49A55F8CA5932AAEDE081D9FAFC1F909DAEAF1C42ECB3868989E772C0C79DA4DCA7DA0A10E9FE34D259E102C56DC373D5E01F69B9F013321FE4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....../.h%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IWY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Y..t.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.001995228178405
Encrypted:	false
SSDEEP:	48:8xmdxT59sHsidAKZdA14tseh7sFiZUkmgqeh7srJy+BX:8x8rFndJy
MD5:	77C916F1945F54E45A86B9AFE24BB401
SHA1:	222331B50528D3F5CD88D0F192D72D7FB691F161
SHA-256:	8DB6F1EE4FAD9AB3E39A52C308D4D1D42FD1854089E79419AF960AA4AD25E719
SHA-512:	216DA28875C2EAECD4D654DDFF417705F4A3C3E54C5CE02C48D0418BF486CF8F4F7D1D6D41691E6B227DB8FBD1ABE7102FDA6EF08619CC55B97BA1DD5434A898
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IWY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Y..t.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 15:30:33 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9876018398033777
Encrypted:	false
SSDEEP:	48:86dxT59FHsidAKZdA1vehDiZUkwqeh1Jy+R:8grdjJy
MD5:	D3CBF7342B5C47CDDD4B9951BBBD9E80
SHA1:	C469B61720367474AB560A3523C1F4A3BB5480CC
SHA-256:	964A79B9BC53967B6A6610B4354BFC253AB836A43D146EFDB7E7CD8268E09B1E
SHA-512:	E94A109F3C1F590BFE2ACAEFF67ED46C72044E929217B195188C89F09D2C9BF872E62E6FA18AEC675E5E9CC4E69058E323B906B147B789C71A1636C5A36F69B4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....).h%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IWY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Y..t.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 15:30:33 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9759271166236867
Encrypted:	false
SSDEEP:	48:8SdxT59FHsidAKZdA1hehBiZUk1W1qehnJy+C:8or99HJy
MD5:	53E5844E6595A7CD76601D32747FA3D4
SHA1:	5F22D117020690AA8D2173FE74154E6E4BAC0646
SHA-256:	D43DA0219D9B4FBF22617FDF58DBC2A0DD2A138B14C99D828C91DBAA3432915E
SHA-512:	29D3438763E14CEC96B77119E70638015AFFE17A8F6EF53CFB552F18C6BF75F7BEDCE83BA85A36D419533D3818AC9189A24385F7B62AA57BBE8C86DB58DA948A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....G5.h%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IWY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Y..t.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 15:30:33 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9867032508079725
Encrypted:	false
SSDEEP:	48:8idxT59FHsidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbdJy+yT+:84rBT/TbxWOvTbdJy7T
MD5:	3EF2A79064DFC0B669F489414477D90D
SHA1:	1F2DFC17127720898E204EA27969A0CD6084BE16
SHA-256:	6588C58CBBDBB42C1D69EA53D218DB47878F3DDB5349A1D066ED108B96FC3C09
SHA-512:	C127DDB38362A2F7CF76E4C68C398A5347F975E1F4EA598458D2AA1911AFDB9BA66423F852E73BD8321E720B018BADF1175723D48E8EE9FB89FC4FC3A5051835
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....b{..h%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IWY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Y..t.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	318713
Entropy (8bit):	4.9382988876470755
Encrypted:	false
SSDEEP:	3072:owtki9QkGoO4QPwGY5DPMwqGsbkyvLUi4beyAX/bSe2yUXaemHqOOkwsik7oZtIm:Fj9p
MD5:	F747282A2831677A6CB1C9CA4FE2B8FE
SHA1:	5B58775E73BD52981112378D9CE936305FE95832
SHA-256:	A5B1011E796F97DE920414F0C9A0D54291A16DB3325D2541A003A93D025492F2
SHA-512:	AF25D86E3301E93136F399CACC31E3B037EA4FCF81B95FDA587F38D3D0CAA9286CC5C1C870C184FFE4DF6D773826535266F41D06EB7071357DB60B3970C92BC3
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-base.min.ACSHASHf747282a2831677a6cb1c9ca4fe2b8fe.css
Preview:	.cmp-image__image{width:100%}..aem-Grid{display:block;width:100%}..aem-Grid::before,.aem-Grid::after{display:table;content:" "}..aem-Grid::after{clear:both}..aem-Grid-newComponent{clear:both;margin:0}..aem-GridColumn{box-sizing:border-box;clear:both}..aem-GridShowHidden>.aem-Grid>.aem-GridColumn{display:block !important}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--default--1{float:left;clear:none;width:100%}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--offset--default--0{margin-left:0}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--offset--default--1{margin-left:100%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--default--1{float:left;clear:none;width:50%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--default--2{float:left;clear:none;width:100%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--offset--default--0{margin-left:0}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--offset--default--1{margin-left:50%}..aem-Grid.aem-Grid--2>.a

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	159
Entropy (8bit):	4.661188988961239
Encrypted:	false
SSDEEP:	3:agWqLss4aXD5R20gJYRnd7HtOx1L5HQhLIzseX5LxfYLk21:QqPXD5bDRd7H8L5whLzeJSI21
MD5:	C22EA5B46F3FCAD90DA0ABCC0A3F73D4
SHA1:	2DB789C63AFB63D98932D7B55907DC3508E318B4
SHA-256:	8334DAA260516BB896407461E5F10E8E3041B06C56846BBB9D3435C6E77513AD
SHA-512:	A0359F8C25DC40CEFFD14A41BA81794717B99DABE78CBF8A8678F3E3EC57F317388CA0DC55B1CC6AD2D6C13D2B3CAEB5A64527BB2C646ED2D93775437DA646F1
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/microsoft/components/structure/page/clientlibs/featurecontrol.min.ACSHASHc22ea5b46f3fcad90da0abcc0a3f73d4.js
Preview:	'use strict';function isFeatureEnabled(b){var a=document.getElementById("customFeatureControl").getAttribute("enabledFeatures");return null!=a&&a.includes(b)};

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	dropped
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	797
Entropy (8bit):	6.872905559964054
Encrypted:	false
SSDEEP:	12:+cK/gj6qWMaFhzC6lbcNXuJVHVJ2N9wtt5M+RLtTbfVwPPxahSxN//YBgPiWU1:+cKYj6L1zma4wttR5ThGuBgaT1
MD5:	8D6B4CB1393852A781EB2998FCC0D4E1
SHA1:	97417B83F19A4E1802B0C59A3DE251057AE1F73B
SHA-256:	E8826A23751C7EC05544367F6BAFF6FEEB92D3043384B06FC480146190FCDB50
SHA-512:	FAFD68FC5D871861C2E68B9C644C5022D6F23EFE4C596710AA345DAABE52614FEE3AEEE1EC7D7E4D71F411BE622A9063500E71F20D18746D739A1D3A1C321766
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/left_aligned_print
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......&...&....pixi............av1C........colrnclx...........ipma...................mdat......e......2...@...E..,..dV..1.RB....I=..pNP....C.RM.eEy....I..k..oug..eYv7...2...S=_.....).QO,+.S....W.F..q2......+.......v...{.\UR.r.../.......;.......@G.:.C.0 ..C.KN.\[.....,R.,_._.T;\|...~mF,>.9.L2.%.Y..<Z..'i B.`...?....[.!...K($2})...b.O~.$z..K.....>t2.$....r.g...OG%nB.[......x...7kE.h.3.....y#.`..i..G.ug.Pk..Im.N.;.E.1l..<..d..T,.B....4.:E.s..W.T.A...;r.tMM.7...t........&....c..O...>.@.(....Zt.}..UC...oG.NXb.gI....?..q.p..[..i.N.K.W....f.....y7...u..nP.W._.Qk.5....r..

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (527)
Category:	dropped
Size (bytes):	626
Entropy (8bit):	4.919791618209649
Encrypted:	false
SSDEEP:	12:cYdIRGdIg8dlHEGIUd4Eh0IAGELTsZz24W2Q5bWNb93e:cmJJaFEA4nLAZzBW5Qp3e
MD5:	2C68EC05A3BCED13F16B9D904B253B41
SHA1:	7ECB19628EB6E39E2CAE0ED1633317CEA2C3BC8C
SHA-256:	EB79B38420ADE5EE65974DEBCC0A8514B87657E32EB1D26647D2FAD76B39636A
SHA-512:	8165FDD4E4856A8028F0AC300542ECA159CE910FD21BDEB2110CC90D971A666346D3A155875F6C224F25188D4DD8141D27B0F9D74D6E5D3A3224591BD058E926
Malicious:	false
Reputation:	low
Preview:	'use strict';$(function(){var a=document.querySelector("#msChatContainer"),b=document.querySelector(".back-to-top.sticky"),c=document.querySelector(".fixed-back-to-top.fixed-sticky"),d=!(!document.querySelector("#storeassistantroot")\|\|!window.storeAssistantReactJsLib\|\|"true"!==localStorage.enableStoreAssistantChat&&"wwwdev.microsoft.com"!==window.location.host&&"wwwppe.microsoft.com"!==window.location.host&&!window.location.host.includes("adobedev.microsoft.com")&&!window.location.host.includes("adobeppe.microsoft.com"));.a&&b&&!d&&$(b).addClass("pageHasChatContainer");a&&c&&!d&&$(c).addClass("pageHasChatContainer")});

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	171486
Entropy (8bit):	5.043877429718187
Encrypted:	false
SSDEEP:	3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCx1:jlZAW9kJeqg
MD5:	B7AF9FB8EB3F12D3BAA37641537BEDC2
SHA1:	A3FBB622FD4D19CDB371F0B71146DD9F2605D8A4
SHA-256:	928ACFBA36CCD911340D2753DB52423F0C7F6FEAA72824E2A1EF6F5667ED4A71
SHA-512:	1023C4D81F68C73E247850F17BF048615DDABB69ACF2429644BDAF8DC2A95930F7A29CEAE6FBD985E1162897483A860C8248557CDA2F1F3D3FF0589158625A49
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-eus-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34052, version 0.0
Category:	downloaded
Size (bytes):	34052
Entropy (8bit):	7.994131533337155
Encrypted:	true
SSDEEP:	768:WHH8jjaseVFXnmQ8njOkV5c4d7DOgx1J89JzHNBbFOlsy0kQ6lhe:kH8jj3uWxKe5c4xz69hNalP0kQ6lhe
MD5:	36397A3BC139C6E9F81D383F060F080A
SHA1:	3F4F86C10920D4ED345F4858B6CDE9F93E1AEB81
SHA-256:	4F7F4AFE26E71FA9CA1DAC4A43B557A554A46F53251D849F07ED08A04829D74B
SHA-512:	7FFF4870E9142E6E1921F8DD78E3B049547EC1D540EFE573C2938F8B855DB61BA908FA9D3C8DA1BB2AAE6D95217A586D256B9EA2BD8A8F706B1DB75BC21F2CB9
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2
Preview:	wOF2.............................................`....."..\.....D..D.6.$........ .. . ..@.S.5x.q..m.5.7Q..2......6..R....v.j.......".c..@.Z.B..G.Y.\S.AtT.iTJt.....l.>..=+z...1.pP..[.+.S..`...c.1.u1...)......`............9.8.......+..4...;..[W.v..p0..qg..=..+...1...\|R..qM..\|/...%..!C.....G:.;7...Z..^P...o..q.B'....a....M.l3k....=&.'.'..8.....K..k........}.?w.i[..q.,...,.0,.....?...o.y..@..U5.:T..E..B..%......YU.....Z..4T..5....m/..,.$.w..`O.s.c.{...;a;..T...9../.......,....BDf.S).ola._e../..z%.:....r..d;.t.....7....jI!-.....{..l.T..H%8.p.*=!.z8.7.k..L...WUW...0.0.....7Q.0.J..Q.\|~P..'Q... m.a..(..p..q...B.:.....e.B...g..<O(..z..o.G...U.x.Tw...^t.._.t..}....q....*K....".UP...Te...<.....f.....{.....I..V...p.+...-<..%.+..?M.A!.ob.9p...7..B. ..R....."4..%M.6..'...!.S.........?.`w.....l@..R.AJ&@..h/H{.(n..I.8..6.4 ..i{..5.I....l...rJ.....N{.^..6..^.V.&..)?Bc.&.u.......fd.H..X.5Fq(c....6...w(O..K...F.......ohh.....Gk...l.2q.t.h..........U9%.n....%...

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	dropped
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	171486
Entropy (8bit):	5.043877429718187
Encrypted:	false
SSDEEP:	3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCx1:jlZAW9kJeqg
MD5:	B7AF9FB8EB3F12D3BAA37641537BEDC2
SHA1:	A3FBB622FD4D19CDB371F0B71146DD9F2605D8A4
SHA-256:	928ACFBA36CCD911340D2753DB52423F0C7F6FEAA72824E2A1EF6F5667ED4A71
SHA-512:	1023C4D81F68C73E247850F17BF048615DDABB69ACF2429644BDAF8DC2A95930F7A29CEAE6FBD985E1162897483A860C8248557CDA2F1F3D3FF0589158625A49
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	downloaded
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-neu-prod/shell/_scrf/js/themes=default/54-af9f9f/d4-fb1f57/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/f9-a5b2ce/db-bc0148/dc-7e9864/6d-c07ea1/6f-dafe8c/f6-aa5278/73-a24d00/6d-1e7ed0/b7-cadaa7/c4-898cf2/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/d0-e64f3e/92-10345d/79-499886/7e-cda2d3/58-ab4971/ca-108466/e0-3c9860/de-884374/1f-100dea/33-abe4df/2b-8e0ae6?ver=2.0&_cf=02242021_3231&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (505)
Category:	downloaded
Size (bytes):	1418
Entropy (8bit):	5.418786110345074
Encrypted:	false
SSDEEP:	24:gkWndJbDZVHGCGH0199EYCDNQNFHOS91AqCCoW40HJtmz2Xw+mlu4oFU5kveTOwD:gkw9ZVHG3HEuvNQNFv16XW1HJEkmEhUh
MD5:	20AAFDF6904D3DC5DB0E0E33ABBFC1A4
SHA1:	CC1A639FF69FE0D8A8F1EFEE7FCB04941E7B57C8
SHA-256:	EE4E620F350907CE3867454B2BD45984BE949EB46B113183D4B8B403032DA14D
SHA-512:	91B0BD81FCD2D3D040D9FC1DB74F5CA916EF88E7887D2868530BF1319EAF5462CC54421AB80FC97B258B569B9AF40F2B9FD1B6D417C9A4561BBA22EDF785D905
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-jquery-cookie.min.ACSHASH20aafdf6904d3dc5db0e0e33abbfc1a4.js
Preview:	/. jQuery Cookie Plugin v1.4.1. https://github.com/carhartl/jquery-cookie.. Copyright 2013 Klaus Hartl. Released under the MIT license./.'use strict';(function(d){"function"===typeof define&&define.amd?define(["jquery"],d):"object"===typeof exports?d(require("jquery")):d(jQuery)})(function(d){function l(a,c){if(e.raw)var b=a;else a:{0===a.indexOf('"')&&(a=a.slice(1,-1).replace(/\\"/g,'"').replace(/\\\\/g,"\\"));try{a=decodeURIComponent(a.replace(m," "));b=e.json?JSON.parse(a):a;break a}catch(h){}b=void 0}return d.isFunction(c)?c(b):b}var m=/\+/g,e=d.cookie=function(a,c,b){if(void 0!==c&&!d.isFunction(c)){b=d.extend({},e.defaults,b);.if("number"===typeof b.expires){var h=b.expires,g=b.expires=new Date;g.setTime(+g+864E5*h)}a=e.raw?a:encodeURIComponent(a);c=e.json?JSON.stringify(c):String(c);c=e.raw?c:encodeURIComponent(c);return document.cookie=[a,"\x3d",c,b.expires?"; expires\x3d"+b.expires.toUTCString():"",b.path?"; path\x3d"+b.path:"",b.domain?"; domain\x3d"+b.domain:"",b.secure?";

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	downloaded
Size (bytes):	2483
Entropy (8bit):	4.975802761379116
Encrypted:	false
SSDEEP:	48:gRwM38jJhANPlVwolt7iRoEQoi2GM3DsoVnUOmXRr89NQG9J9T:uoh8lfl20oBDsoC2vQG9r
MD5:	1FE64B7A81BE436FB922B3D170057436
SHA1:	F72236E3BC2360BE2AE15026B63B20E52F1B55BC
SHA-256:	A0CC24B501DDD45E9D35BA7F47CD2FB9044DDB0E1FE83D03DEC9771333E15B44
SHA-512:	C5ED71532B0166D0C296379DF855CF4E3934590CF3EF038E5D3713AA9D83E8EDDACF3E4D2F05C7B078A6A7B72A4DD17B8A7CDE5636ADB3443B1590660CE2E675
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/privacy/components/content/print-expand-all/v1/print-expand-all/clientlibs/site.min.ACSHASH1fe64b7a81be436fb922b3d170057436.js
Preview:	'use strict';$(function(){$(document).ready(function(){$(".expandall").attr({tabindex:0,role:"button","aria-expanded":!1}).on("click keydown",function(a){if("click"===a.type\|\|"Enter"===a.key\|\|" "===a.key){$(this).toggleClass("expanded");$(".expandall .collapsed-label").toggleClass("hidden");$(".expandall .expanded-label").toggleClass("hidden");$(".expandall .collapsed-label").hasClass("hidden")?($(".summary-content").removeClass("hidden"),$(".detail-content").addClass("hidden"),$(".expand-collapse-toggle-btn .expand-btn").removeClass("hidden"),.$(".expand-collapse-toggle-btn .collapse-btn").addClass("hidden")):($(".summary-content").addClass("hidden"),$(".detail-content").removeClass("hidden"),$(".expand-collapse-toggle-btn .expand-btn").addClass("hidden"),$(".expand-collapse-toggle-btn .collapse-btn").removeClass("hidden"));$(".expand-collapse-toggle-btn").hasClass("hidden")&&$(".expand-collapse-toggle-btn.hidden").closest(".expand-collapse-content").find(".summary-content").removeCla

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32600, version 1.0
Category:	downloaded
Size (bytes):	32600
Entropy (8bit):	7.992324478082099
Encrypted:	true
SSDEEP:	768:DUDXjrIMcH1YcS3IOrOm4VZcd1T5JQ62Fd:IXXjREcnNa6O
MD5:	8EDA29C1ACD384ABB917790DCD92A049
SHA1:	A77A4763CB132C02AD9D2EAE4652F470B66374C8
SHA-256:	E8ED064E3AD6789015C7C3031D57E1A412C80BE1B42D72D06B2631D80F3481BF
SHA-512:	CA8E12B8FA45E5315075CAC8B02A8CAD956341C2D047F126462A5B11E4F20118353ED66971C3901D40A6D4C1F782C1818D12B2E7E5DA30A08C66A75AF25A53DA
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/resources/fonts/MWFFluentIcons.woff2?v=2.15.1
Preview:	wOF2.......X......2...~.........................?FFTM..$.`..<........x.....6.$..h. ..X..t[..Q.<.......B.....H.C.".....&....?'A..&o.S..n...IE..U.RY@,..5.5zB....K.....rU.n.!.f.8...p.q>....;-_."......... ...PO.9.\|....o../.d...0...."0n.N.Kf.E:mvu.SH..R..ECT.U_!(.\.v..0.%.....6.4....Tv.9...T..H(.....<k]"p."...CG.f..B...9?%+.......r.:\z.)...t...[.Z.N._D..g.......^....2Xg...z1......ek8.L6W`.....F.j.U.......0......n..P...t...W..;.0 ..C.$.R.v..mY.0.!.&.PZB.IH!!!@..F...B..B(..u......R..V.uT...,......z.wz^a.s........N{..EZ..(...Jw.'...."..2.(.f."...=.....R....D....".v..].^.5...M......k..j.J.y.I....5..9...R..a.U..S......mR..c.o.....L-S.<....X..d\$.DR...fw.n... .:..%x............y'...\|..rfAw.{.7...K..})..3.f.... S.~(...?U...H....b,:.....\|`..3 ..".Q..+.I&....AK.H...O.b../.\.......n.....#.....-"..A......00p.<$..!_....VG.....ds...BB4w.)C.t..F....#...x\|...\..Xu.T....N...?b....%.QQp.p..D..~....:.[.wQ..P.....{..........o_M...h\|%E.'t9M..w4._.Z..x..7. .t

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	dropped
Size (bytes):	2483
Entropy (8bit):	4.975802761379116
Encrypted:	false
SSDEEP:	48:gRwM38jJhANPlVwolt7iRoEQoi2GM3DsoVnUOmXRr89NQG9J9T:uoh8lfl20oBDsoC2vQG9r
MD5:	1FE64B7A81BE436FB922B3D170057436
SHA1:	F72236E3BC2360BE2AE15026B63B20E52F1B55BC
SHA-256:	A0CC24B501DDD45E9D35BA7F47CD2FB9044DDB0E1FE83D03DEC9771333E15B44
SHA-512:	C5ED71532B0166D0C296379DF855CF4E3934590CF3EF038E5D3713AA9D83E8EDDACF3E4D2F05C7B078A6A7B72A4DD17B8A7CDE5636ADB3443B1590660CE2E675
Malicious:	false
Reputation:	low
Preview:	'use strict';$(function(){$(document).ready(function(){$(".expandall").attr({tabindex:0,role:"button","aria-expanded":!1}).on("click keydown",function(a){if("click"===a.type\|\|"Enter"===a.key\|\|" "===a.key){$(this).toggleClass("expanded");$(".expandall .collapsed-label").toggleClass("hidden");$(".expandall .expanded-label").toggleClass("hidden");$(".expandall .collapsed-label").hasClass("hidden")?($(".summary-content").removeClass("hidden"),$(".detail-content").addClass("hidden"),$(".expand-collapse-toggle-btn .expand-btn").removeClass("hidden"),.$(".expand-collapse-toggle-btn .collapse-btn").addClass("hidden")):($(".summary-content").addClass("hidden"),$(".detail-content").removeClass("hidden"),$(".expand-collapse-toggle-btn .expand-btn").addClass("hidden"),$(".expand-collapse-toggle-btn .collapse-btn").removeClass("hidden"));$(".expand-collapse-toggle-btn").hasClass("hidden")&&$(".expand-collapse-toggle-btn.hidden").closest(".expand-collapse-content").find(".summary-content").removeCla

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (584)
Category:	downloaded
Size (bytes):	6679
Entropy (8bit):	5.376180402604044
Encrypted:	false
SSDEEP:	192:f+oeo1VY+B3F0qyNJ0kmyQ3BiLuAH+BDmOXMkuU:f+oeo1rZFV2LQ3w6AH+JmOXMkt
MD5:	FEB2D7B9574C6B769175093E3A05C4D2
SHA1:	7129DD82A3545C537A21AF43C9A17E5CB3E14274
SHA-256:	868371BEB7D0A2FDF03849D1A4DAB6E70D6577E8FF5272C58547820651AED842
SHA-512:	9D7D47B836C04F7873243D3C90202CED0F98EBBFB0BEEA543B6D467C2B0F464F2E8B9A3082DD8FE5821B0EEABFCC3FD4469C8448DABD4463DF8A09E9347A357E
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASHfeb2d7b9574c6b769175093e3a05c4d2.js
Preview:	'use strict';(()=>{function l(f){var e=F[f];if(void 0!==e)return e.exports;e=F[f]={exports:{}};return H[f](e,e.exports,l),e.exports}var H={8713:()=>{$(function(){function f(){-1!==document.cookie.indexOf("".concat("Cascade.AuthSSO","\x3d"))&&(document.cookie="".concat("Cascade.AuthSSO","\x3d; expires\x3dThu, 01 Jan 1970 00:00:00 UTC;"))}function e(){var a=function(){var d=document.cookie.match(/(^\|;\s)(Cascade.AuthSSO)=([^;])/);return d?(d=parseInt(decodeURIComponent(d[3])),!isNaN(d)&&d>m.DefaultAttempted?.m.SharedStateAttempted:m.DefaultAttempted):m.NotAttempted}(),c=!(!window.msauthRpsShare\|\|b.accountConstraint===v.AAD);if(a===m.NotAttempted\|\|c&&a!==m.SharedStateAttempted)!function(d){$("#".concat("cascadeauthsso")).remove();var g=document.createElement("iframe");g.src=d;g.setAttribute("width","0");g.setAttribute("height","0");g.setAttribute("border","0");g.setAttribute("frameborder","0");g.setAttribute("style","display: none");g.id="cascadeauthsso";document.body.appendChild(g)}(""

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	406
Entropy (8bit):	4.645093417199183
Encrypted:	false
SSDEEP:	12:M9BAG1/qAT9BAs1/qKdDYT9BAR6T9BAOk/CMRZcJfRDZ:M9p/qS91/qfT9J9yRC5N
MD5:	F9F2395C582FA601707B7A5DFAE9F05F
SHA1:	27B15AECD0BFDD3B25556AC00755856D4D331E0D
SHA-256:	D7D6D06624D4BDF6935B848DF342CE322D02B58D12BF12149DF92D557E5E9BC4
SHA-512:	F3378927D96B0B172981A821A8C2A16D0F397ED92E835B7C46316FC48350402D972A5411F0FA4C260F205AA1F7917F83F8247BF8A62C7F22E0076B168275B1E9
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-uhf.min.ACSHASHf9f2395c582fa601707b7a5dfae9f05f.css
Preview:	.c-uhfh .c-action-trigger.glyph-shopping-cart span:not(.shopping-cart-amount),.c-uhfh .c-action-trigger.glyph-shopping-bag span:not(.shopping-cart-amount){line-height:48px !important}..c-uhfh .c-action-trigger.glyph-shopping-cart:after,.c-uhfh .c-action-trigger.glyph-shopping-bag:after{line-height:43px}..c-uhfh.c-sgl-stck .c-search button{line-height:18px}..msame_Header_name{line-height:44px !important}

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3164)
Category:	downloaded
Size (bytes):	34401
Entropy (8bit):	5.567515913811421
Encrypted:	false
SSDEEP:	768:xluaIaJW9ePBW/YfKbNckc0OFc0hLoSIbSZdfKGnRmSdgSJnsYXZeTnOki:XuioyA/7c0opLozb6RmCg6kTG
MD5:	5EE9E4E4E0A5FD39092E63D2D102B12B
SHA1:	1B66C81BD03006B327228854327C0FD3DF434BC2
SHA-256:	441B9F212CD322C6B039A2691F999EB2FAFC10FD645BCDB043A6DEE2DD052DA7
SHA-512:	3CA07A5D89931BCF6F0294C0727020A7FFE663487DB6ECC309FF69DDF59A0490BF85395E91241D40ED1DCF157C0784E6D6B53D8C92D52ED05823CCB6FBE1C470
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/microsoft/clientlibs/clientlib-httpclient.min.ACSHASH5ee9e4e4e0a5fd39092e63d2d102b12b.js
Preview:	'use strict';(()=>{function L(n){var r=T[n];if(void 0!==r)return r.exports;r=T[n]={exports:{}};return U[n](r,r.exports,L),r.exports}var U={3770:(n,r,h)=>{n.exports=h(2494).default},2494:(n,r,h)=>{function f(x){return!x.response&&!!x.code&&"ECONNABORTED"!==x.code&&(0,a.default)(x)}function g(x){return"ECONNABORTED"!==x.code&&(!x.response\|\|500<=x.response.status&&599>=x.response.status)}function p(x){return!!x.config&&g(x)&&-1!==t.indexOf(x.config.method)}function m(x){return f(x)\|\|p(x)}function k(){return 0}.function l(x){var H=x[A]\|\|{};return H.retryCount=H.retryCount\|\|0,x[A]=H,H}function u(x,H){x.interceptors.request.use(function(E){return l(E).lastRequestTime=Date.now(),E});x.interceptors.response.use(null,function(E){var v=E.config;if(!v)return Promise.reject(E);var I=Object.assign({},H,v[A]),P=I.retries;P=void 0===P?3:P;var J=I.retryCondition;J=void 0===J?m:J;var M=I.retryDelay;M=void 0===M?k:M;I=I.shouldResetTimeout;I=void 0!==I&&I;var Q=l(v);if(J(E)&&Q.retryCount<P){Q.retryCount+

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (340)
Category:	downloaded
Size (bytes):	1068
Entropy (8bit):	4.855593148955592
Encrypted:	false
SSDEEP:	12:xhlKRQk6oZN8YGoRsfl28SNV0NAMh9OCAwioW6qsevnZvj5vHXDdYdqRjdt1m4AB:Y8YGasfl2TzkEsefzXDOwt1mNmQ
MD5:	E886F9789012ABD061DC8A7B5CD1D9E5
SHA1:	268EF03E0EA9B5B900F92B176A47772CDEBBE13E
SHA-256:	5AEEAC6FE16E5358BE257F7C3DA6D236D8851520B9AE5F011A4631FDB80E8047
SHA-512:	65D5263A08BA025943F15ACB69220F2332620B7EE1522719930A7C005419B88AF7A03C03DAD814C9D752AB858328223ABFB3B9EE9BA8AFE22647F85FAAB63510
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/privacy/components/content/print-expand-all/v1/print-expand-all/clientlibs/site.min.ACSHASHe886f9789012abd061dc8a7b5cd1d9e5.css
Preview:	.hidden{display:none}..print-expand-action-bar .open-print-view .print-img{width:20px;height:20px;margin:unset;padding-right:2px}..print-expand-action-bar{display:flex;justify-content:flex-end;height:30px}..open-print-view,.expandall{box-sizing:border-box;color:#006fc9;cursor:pointer;display:inline;font-family:"Segoe UI";font-size:16px;font-weight:400;height:auto;line-height:25px;outline:0;overflow-wrap:break-word;text-decoration-color:#006fc9;text-decoration-style:solid;text-size-adjust:100%;width:auto;padding-left:10px;padding-right:10px}..open-print-view{display:flex}..open-print-view:hover{text-decoration:underline}..collapsed-label:hover{text-decoration:underline}..expanded-label:hover{text-decoration:underline}..arrow{display:inline-block;margin-left:5px;border-top:5px solid transparent;border-bottom:5px solid transparent;border-left:5px solid #006fc9;transform:rotate(90deg);transition:transform .5s ease}..expandall.expanded .arrow{transform:rotate(270deg)}..expandall .expanded-l

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 30132, version 0.0
Category:	downloaded
Size (bytes):	30132
Entropy (8bit):	7.994040282339949
Encrypted:	true
SSDEEP:	768:oE6QnF5iqE+5HV38V+SnObhyTt0VyxVQoZaFjNpa5euFhfbwV:oE9nF5nE+JVMV+fAu2VQoZaROj0V
MD5:	4C38C2A78502AF8DFBFE0F71CC49A1AE
SHA1:	4B8C845263B3696E28CF3F313E0214E22688A750
SHA-256:	1232BBDBC5D205F3C5A40EFA5ED92839C79E7879D5168445CC47645BB93F7D1B
SHA-512:	E60FFEA855BBA4241DAF68AF6BD3C1967211A215EF281C7DAC8311756A0781D00F529FF0AC5CE789238A4215EB1540C6C61C69D650CB2027C3C72CD475DD7B9B
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/Bold/latest.woff2
Preview:	wOF2......u..........uZ.........................`........\.....$....6.$........ .... ..-.......ZAj.bf p..................."Q..vG.{..9h`..xD.j.VS.....Y.g.."..D,#.C1.\|.........2....V.-v............&~;.As.m....=.@....=...w....".q..A..~..pN.q...y8...Kw.\.:}''.'zjX..%V,0...Zmf.?......9.\.w...f..,.....ag..,..q..$..r....0..El......".....].J...D:I\|:9z)$.V......L...#..\s7._...@....i}..lY....-..N.;.DC..,`v9.VCw.u.3..>.......yY.!~..8..<..{...M.B....g@...K;.....].Z..Y..^g...A{<....i..n..C...4.<.b..J..d..x...@...}.f....U.( ...`...0eF.Sh/.1T..J.]W<..].>T....>..,wv....~....%.:..{`K..NR.O.a...pS..m....DS...Z>...T..T%........3...7...N.sl...wb..............$q0$E..@p.J"..v.........+G..$..@..o.%...v..S.\tn.un...wS......M..m1..D.d.#FD.3...........c..f...#R.......~....Q8@.......}(..Im....u......=......c.....',e3a.13.pc....0......p.N..._...O.a...../.0.. ,.:.\7.....Bg......4.-.P...(..%....de+O.Q......@.m.Lq..D..\|V...X{....X..!Ii.Q.M..8..G.3.~o.GS9.....~.?.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (505)
Category:	dropped
Size (bytes):	1418
Entropy (8bit):	5.418786110345074
Encrypted:	false
SSDEEP:	24:gkWndJbDZVHGCGH0199EYCDNQNFHOS91AqCCoW40HJtmz2Xw+mlu4oFU5kveTOwD:gkw9ZVHG3HEuvNQNFv16XW1HJEkmEhUh
MD5:	20AAFDF6904D3DC5DB0E0E33ABBFC1A4
SHA1:	CC1A639FF69FE0D8A8F1EFEE7FCB04941E7B57C8
SHA-256:	EE4E620F350907CE3867454B2BD45984BE949EB46B113183D4B8B403032DA14D
SHA-512:	91B0BD81FCD2D3D040D9FC1DB74F5CA916EF88E7887D2868530BF1319EAF5462CC54421AB80FC97B258B569B9AF40F2B9FD1B6D417C9A4561BBA22EDF785D905
Malicious:	false
Reputation:	low
Preview:	/. jQuery Cookie Plugin v1.4.1. https://github.com/carhartl/jquery-cookie.. Copyright 2013 Klaus Hartl. Released under the MIT license./.'use strict';(function(d){"function"===typeof define&&define.amd?define(["jquery"],d):"object"===typeof exports?d(require("jquery")):d(jQuery)})(function(d){function l(a,c){if(e.raw)var b=a;else a:{0===a.indexOf('"')&&(a=a.slice(1,-1).replace(/\\"/g,'"').replace(/\\\\/g,"\\"));try{a=decodeURIComponent(a.replace(m," "));b=e.json?JSON.parse(a):a;break a}catch(h){}b=void 0}return d.isFunction(c)?c(b):b}var m=/\+/g,e=d.cookie=function(a,c,b){if(void 0!==c&&!d.isFunction(c)){b=d.extend({},e.defaults,b);.if("number"===typeof b.expires){var h=b.expires,g=b.expires=new Date;g.setTime(+g+864E5*h)}a=e.raw?a:encodeURIComponent(a);c=e.json?JSON.stringify(c):String(c);c=e.raw?c:encodeURIComponent(c);return document.cookie=[a,"\x3d",c,b.expires?"; expires\x3d"+b.expires.toUTCString():"",b.path?"; path\x3d"+b.path:"",b.domain?"; domain\x3d"+b.domain:"",b.secure?";

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	dropped
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (527)
Category:	downloaded
Size (bytes):	626
Entropy (8bit):	4.919791618209649
Encrypted:	false
SSDEEP:	12:cYdIRGdIg8dlHEGIUd4Eh0IAGELTsZz24W2Q5bWNb93e:cmJJaFEA4nLAZzBW5Qp3e
MD5:	2C68EC05A3BCED13F16B9D904B253B41
SHA1:	7ECB19628EB6E39E2CAE0ED1633317CEA2C3BC8C
SHA-256:	EB79B38420ADE5EE65974DEBCC0A8514B87657E32EB1D26647D2FAD76B39636A
SHA-512:	8165FDD4E4856A8028F0AC300542ECA159CE910FD21BDEB2110CC90D971A666346D3A155875F6C224F25188D4DD8141D27B0F9D74D6E5D3A3224591BD058E926
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/microsoft/components/content/back-to-top-button/v1/back-to-top-button/clientlibs/sites.min.ACSHASH2c68ec05a3bced13f16b9d904b253b41.js
Preview:	'use strict';$(function(){var a=document.querySelector("#msChatContainer"),b=document.querySelector(".back-to-top.sticky"),c=document.querySelector(".fixed-back-to-top.fixed-sticky"),d=!(!document.querySelector("#storeassistantroot")\|\|!window.storeAssistantReactJsLib\|\|"true"!==localStorage.enableStoreAssistantChat&&"wwwdev.microsoft.com"!==window.location.host&&"wwwppe.microsoft.com"!==window.location.host&&!window.location.host.includes("adobedev.microsoft.com")&&!window.location.host.includes("adobeppe.microsoft.com"));.a&&b&&!d&&$(b).addClass("pageHasChatContainer");a&&c&&!d&&$(c).addClass("pageHasChatContainer")});

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (514)
Category:	downloaded
Size (bytes):	941
Entropy (8bit):	5.237500495085018
Encrypted:	false
SSDEEP:	24:IlxCSVYfo4ydsethmnUitaKKklq93+TEDN:IlAsdbtKUitaKHCsEDN
MD5:	A1887C9F524FA5E9982AA5F04B988625
SHA1:	E85FBA4E436A6FCBDD5F1DBB1C9A6468DD9DDE78
SHA-256:	F0D2B69332C34A689A07C6A57B5B65B83A83EFE29A5375D8735924500ABB1FF1
SHA-512:	E7FE3E587B02689146CAEFE363BADDEF7EF2BC77604405CBE0DA8D2A0C7A2B899CB1C811A302852E6B88009982E03E27A0FEB546C9E2B6E6A4EEAEED9CBD5B4A
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/microsoft/components/content/areaheading/v1/areaheading/clientlibs/site.min.ACSHASHa1887c9f524fa5e9982aa5f04b988625.js
Preview:	'use strict';(()=>{function c(b){var a=e[b];if(void 0!==a)return a.exports;a=e[b]={exports:{}};return f[b](a,a.exports,c),a.exports}var f={7505:()=>{$(function(){$(".area-heading p a").each(function(b,a){b=$(a).closest("div.row").find("h1,h2,h3,h4,h5,h6");a.dataset.biCn=a.innerText;a.dataset.biEcn=a.innerText;a.dataset.biCompnm="Area Heading";a.dataset.biBhvr="0";a.dataset.biCt="Link";a.dataset.biPa="Body";b=b.first();b.text()&&""!==b.text()&&(a.dataset.biHn=b.text().trim(),a.dataset.biEhn=b.text().trim())});.document.querySelectorAll(".areaheading sup").forEach(function(b){0==b.children.length&&b.insertAdjacentHTML("afterbegin",'\x3cspan class\x3d"sr-text"\x3eFootnote\x3c/span\x3e')})})}},e={};c.n=b=>{var a=b&&b.__esModule?()=>b.default:()=>b;return c.d(a,{a}),a};c.d=(b,a)=>{for(var d in a)c.o(a,d)&&!c.o(b,d)&&Object.defineProperty(b,d,{enumerable:!0,get:a[d]})};c.o=(b,a)=>Object.prototype.hasOwnProperty.call(b,a);c(7505)})();

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (309), with no line terminators
Category:	dropped
Size (bytes):	309
Entropy (8bit):	4.971196656935236
Encrypted:	false
SSDEEP:	6:QuVtCiR2cIT53AM+64uT7nadCkq9KwhA6ONHSInadLb1wnzjCY1ee:jVtCyB4w1cWdYpAfVSVdLa8e
MD5:	D7106DB242C2B41F88A1B02418BEC7E2
SHA1:	7A445118F0B5712744AA4AED6889B28C1E7779F7
SHA-256:	044527A735B287BD84D2AE6D2D3B89C85B52C9750BB07E5AEF19FB8F28F0442B
SHA-512:	C493FBD6926006108E56E23BB204BFE59A7364ED6D2409B5B258D9EA6C060259E13A7E7A22021607F6EDD55EEA52C75DFE7FCF18BB76D6E539FBD763BF399185
Malicious:	false
Reputation:	low
Preview:	'use strict';var DynamicClientSideScriptHandler=function(){return{fetchScriptLink:function(b){var a=(a=document.querySelector('div[data-identifier\x3d"'+b+'"]'))?a.getAttribute("data-content"):null;null===a&&(a=(b=document.querySelector('meta[name\x3d"'+b+'"]'))?b.getAttribute("content"):null);return a}}}();

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29388, version 0.0
Category:	downloaded
Size (bytes):	29388
Entropy (8bit):	7.993008091542256
Encrypted:	true
SSDEEP:	768:2075f+Dti4JBZRdp49Z5wmWPb2O7a35bAvDWIfe:2k5fOtiCXvb2OG3I1e
MD5:	6E75A94D5F7170A1AB532D32C2A35755
SHA1:	9C1B6FFF544089941BBEDDBCF529C3F0B46D853A
SHA-256:	D87D0A7A7FE2C36D1DC093BFE56E9B81B311988789DBD3B65ABF811D551EF02F
SHA-512:	27CDBF98A3F42510EAEB28437E3C4661734B685D63EFF5E47364AC46B73DE617894EDCB19DDD9AFD955DE192CFD8BB755998ED609EC2C279E9AFAB3DB2583175
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/Semibold/latest.woff2
Preview:	wOF2......r..........rq.........................`.....P..5..... ..m.6.$........ ..<. ....Z...Vf...-B..H.......`..^........1.......,.)..D.g.m[.......'...QQK..l!Q.......^.]Q.;...I:$..{t.C.".6.".........z....I.<.OX..%....iT.D.m.N;5y......../6jd.....iP.. m.z.....ltv...r..L....V/.%VfVfeqw..%u.,....Z.,z.....t ...5w.}..e..K.c..G.....6E...F.Q .&."&.....bd.hl.m.J.M......,..._6-.E..o.?..U.=?..l..%r....r..-k$..\|....5..[d...d........2.H...-..?Yp....9x\|...Z/z^G..=...?...l..79...S.r...uj.....u.'..jT...._&..xW`.)..Yakd.....O9.J..+..83.>!..'.`Hg...\|t..YXf..'m..B.....(,;.....2#.)..........:......W.3.....\|Q..f...Z.0vW.L.HE...c<.. U..0..?!.d..W......V./rDn{...B0..t.1...W m...@..Q.L.7.._s....m4..yk.....j.fJ..C........"....-..U.V.n..B..Zg....3..........u...nT....M7@...IQ..(..r........!...v^.s..R.... GH..&...~.......k._..?Y'.O......v...E.,....E...9..%.M...o.w..v(.a.K.h...A.......`...}^.h...PJan..Cl...t...E.@..J.c........+..@..6}OA...Q.\..E....0..2........vgK.O

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/favicon.ico?v2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (517)
Category:	dropped
Size (bytes):	1597
Entropy (8bit):	5.033020564569672
Encrypted:	false
SSDEEP:	48:ThmThFaVSyEYQelMM3flM3bt/Hlz6iU5cy:TQ4lTehvla
MD5:	90F42B4A061B05CD33D18DC7D3A433E8
SHA1:	8FDE605A48BB3B23F5F18A4522AEA7E29575251A
SHA-256:	872BCF65FA9E3E4BC4B4ABBD343D119CFF5B872157345A6B06838E9660F777D9
SHA-512:	3849342F8EFC3718B37B1C2BEEEF0510B3C7EADC3C929712BBE7FF43F133C97EBC45E1608FF6C2C185F0A7F7AEC2A1AC131EA8BC2B89004B81B717C113E6311E
Malicious:	false
Reputation:	low
Preview:	'use strict';$(function(){function e(b,a){b.find(".expand-btn").toggleClass("hidden");b.find(".collapse-btn").toggleClass("hidden");b.find(".detail-content").toggleClass("hidden");b.find(".summary-content").toggleClass("hidden");b=$(b).find("."+a);0<b.length&&(a=b.offset().top-100,$("html, body").animate({scrollTop:a},"slow"));$(b).focus();b="true"===$(this).attr("aria-expanded");$(this).attr("aria-expanded",!b)}$(document).ready(function(){$(".expand-collapse-toggle-btn .collapse-btn").attr({tabindex:0,.role:"button","aria-controls":"summary-content","aria-expanded":!1}).on("click keydown",function(a){if("click"===a.type\|\|"Enter"===a.key\|\|" "===a.key)a=$(this).closest(".expand-collapse-content"),e(a,"summary-content")});$(".expand-collapse-toggle-btn .expand-btn").attr({tabindex:0,role:"button","aria-controls":"detail-content","aria-expanded":!1}).on("click keydown",function(a){if("click"===a.type\|\|"Enter"===a.key\|\|" "===a.key)a=$(this).closest(".expand-collapse-content"),e(a,"detail-

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1998)
Category:	dropped
Size (bytes):	530473
Entropy (8bit):	5.1558754449004525
Encrypted:	false
SSDEEP:	12288:cJpYYYb5T2ZggigVl1e/zXJ5lbgutNPzedZTyatWYLe8dZshIw:cJpYb5T2Zggigv1e/zXJLbgunzedZTyT
MD5:	13ABF4CF4F8384D04A599349524DBBAD
SHA1:	BD1EE95DB4A6E7A1EE1937F47AD7C5B6D7633465
SHA-256:	3E7CE05C8874B9F3628300101F40878DF98F23A09CD4ECC9C9E5CC8067D9068A
SHA-512:	4FCA93D865844FFF1A452B343F75ED786111F1E508505DD841F954159A42E5B9CB587FDC8ADEEA431A14CD042FC4CF16305416CE4CA0C1E9D5E66803C2BD03A7
Malicious:	false
Reputation:	low
Preview:	./!. MWF (Moray) Extensions v2.15.1. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2022 The Bootstrap Authors and Twitter, Inc.. * Copyright .2022 W3C. (MIT, ERCIM, Keio, Beihang).. */..(function (global, factory) {..typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :..typeof define === 'function' && define.amd ? define(['exports'], factory) :..(global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, factory(global.mwf = {}));.})(this, (function (exports) { 'use strict';...var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};...var check = function (it) {.. return it && it.Math == Math && it;..};...// https://github.com/zloirock/core-js/issues/86#issuecomment-115759028..var global$a =.. // eslint-disable-next-line es/no-global-this -- safe.. check(typeof globalTh

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3164)
Category:	dropped
Size (bytes):	34401
Entropy (8bit):	5.567515913811421
Encrypted:	false
SSDEEP:	768:xluaIaJW9ePBW/YfKbNckc0OFc0hLoSIbSZdfKGnRmSdgSJnsYXZeTnOki:XuioyA/7c0opLozb6RmCg6kTG
MD5:	5EE9E4E4E0A5FD39092E63D2D102B12B
SHA1:	1B66C81BD03006B327228854327C0FD3DF434BC2
SHA-256:	441B9F212CD322C6B039A2691F999EB2FAFC10FD645BCDB043A6DEE2DD052DA7
SHA-512:	3CA07A5D89931BCF6F0294C0727020A7FFE663487DB6ECC309FF69DDF59A0490BF85395E91241D40ED1DCF157C0784E6D6B53D8C92D52ED05823CCB6FBE1C470
Malicious:	false
Reputation:	low
Preview:	'use strict';(()=>{function L(n){var r=T[n];if(void 0!==r)return r.exports;r=T[n]={exports:{}};return U[n](r,r.exports,L),r.exports}var U={3770:(n,r,h)=>{n.exports=h(2494).default},2494:(n,r,h)=>{function f(x){return!x.response&&!!x.code&&"ECONNABORTED"!==x.code&&(0,a.default)(x)}function g(x){return"ECONNABORTED"!==x.code&&(!x.response\|\|500<=x.response.status&&599>=x.response.status)}function p(x){return!!x.config&&g(x)&&-1!==t.indexOf(x.config.method)}function m(x){return f(x)\|\|p(x)}function k(){return 0}.function l(x){var H=x[A]\|\|{};return H.retryCount=H.retryCount\|\|0,x[A]=H,H}function u(x,H){x.interceptors.request.use(function(E){return l(E).lastRequestTime=Date.now(),E});x.interceptors.response.use(null,function(E){var v=E.config;if(!v)return Promise.reject(E);var I=Object.assign({},H,v[A]),P=I.retries;P=void 0===P?3:P;var J=I.retryCondition;J=void 0===J?m:J;var M=I.retryDelay;M=void 0===M?k:M;I=I.shouldResetTimeout;I=void 0!==I&&I;var Q=l(v);if(J(E)&&Q.retryCount<P){Q.retryCount+

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	171486
Entropy (8bit):	5.043877429718187
Encrypted:	false
SSDEEP:	3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCx1:jlZAW9kJeqg
MD5:	B7AF9FB8EB3F12D3BAA37641537BEDC2
SHA1:	A3FBB622FD4D19CDB371F0B71146DD9F2605D8A4
SHA-256:	928ACFBA36CCD911340D2753DB52423F0C7F6FEAA72824E2A1EF6F5667ED4A71
SHA-512:	1023C4D81F68C73E247850F17BF048615DDABB69ACF2429644BDAF8DC2A95930F7A29CEAE6FBD985E1162897483A860C8248557CDA2F1F3D3FF0589158625A49
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (473)
Category:	downloaded
Size (bytes):	787
Entropy (8bit):	4.972252532759549
Encrypted:	false
SSDEEP:	24:c0roo76A66karcPnAo6rG86YPN77n0V4SbpZRAok8Aod:Jh76j6tcP8jV7LPSYo
MD5:	A04DDB3F2A2A88B7FB0FA381365BD905
SHA1:	91E89F4682C9E1BCADCD07813267DE6E02E64DE7
SHA-256:	3DBFC4620BA5D33A67DD3719D2E981D894846AFE8E9E8C857AB96222C0B840B1
SHA-512:	29D9F73464AFA81041597783C8F1C48709B8221470F6C3DFFD2E40865A109809ABC0D4A5D7E1AB485EDEDA4EA62434512B6C0FD993236A170CFD3AD96B072EAD
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/microsoft/components/content/inPageNavigationV2/v1/inPageNavigationV2/clientlibs/site.min.ACSHASHa04ddb3f2a2a88b7fb0fa381365bd905.js
Preview:	'use strict';$(function(){var a=$(".scrollspy-container");if(a&&1==a.length){a=$(".nav-in-page-container").attr("id");var b=$("body");b.attr("data-active-class","active");b.attr("data-target","#"+a);new mwf.Scrollspy({el:document.querySelector("body")})}});.function updateButtonVisibility(){var a=document.querySelector("nav.nav-in-page-container"),b=document.querySelectorAll("nav.nav-in-page-container li"),c=document.querySelector("div.nav-in-page-footer"),e=document.querySelector(".nav-in-page-main-content");if(a){var f=a.classList.contains("combobox");b.forEach(function(d){if(d=d.querySelector(".btn"))d.style.display=f?"none":""});c&&e&&(f?e.appendChild(c):a.appendChild(c))}requestAnimationFrame(updateButtonVisibility)}.window.addEventListener("load",updateButtonVisibility);

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (889)
Category:	downloaded
Size (bytes):	92962
Entropy (8bit):	5.482012211093105
Encrypted:	false
SSDEEP:	1536:wB4vGoYlmQr+IDv1Ty/6RsSz5TGF/46nNUgDbC03vu9FnHKDfa6Z/VUhdIKq6Tjv:wqxNrNG9FnHKD/oIKq6Tjv
MD5:	35986A813756F39AB6B922979FFEDB03
SHA1:	C8E2213BBAFAF535DA9C6676F3DBA43449E4D15A
SHA-256:	E2D92BDAAD925C6D355331A338384EE3FF82492352975DD4EFDA791AEF4AB3F5
SHA-512:	289F1C432E73F611D54EB1130013174174222A0C5EEF8E2464C5FD51EE33DC702326EEECA80B2AAE213DB2FCCB149297FC37CC9A0B6CF6E928A66BC27843F930
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-jquery.min.ACSHASH35986a813756f39ab6b922979ffedb03.js
Preview:	/. jQuery JavaScript Library v3.5.1. https://jquery.com/.. Includes Sizzle.js. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://jquery.org/license.. Date: 2020-05-04T22:49Z. Sizzle CSS Selector Engine v2.3.5. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://js.foundation/.. Date: 2020-03-14./.'use strict';(function(H,Sa){"object"===typeof module&&"object"===typeof module.exports?module.exports=H.document?Sa(H,!0):function(Ta){if(!Ta.document)throw Error("jQuery requires a window with a document");return Sa(Ta)}:Sa(H)})("undefined"!==typeof window?window:this,function(H,Sa){function Ta(a,b,c){c=c\|\|M;var d,f=c.createElement("script");f.text=a;if(b)for(d in Kc)(a=b[d]\|\|b.getAttribute&&b.getAttribute(d))&&f.setAttribute(d,a);c.head.appendChild(f).parentNode.removeChild(f)}function Ia(a){return null==.a?a+"":"object"===typeof a\|\|"function"===typeof a?db[Ob.call(a)]

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (309), with no line terminators
Category:	downloaded
Size (bytes):	309
Entropy (8bit):	4.971196656935236
Encrypted:	false
SSDEEP:	6:QuVtCiR2cIT53AM+64uT7nadCkq9KwhA6ONHSInadLb1wnzjCY1ee:jVtCyB4w1cWdYpAfVSVdLa8e
MD5:	D7106DB242C2B41F88A1B02418BEC7E2
SHA1:	7A445118F0B5712744AA4AED6889B28C1E7779F7
SHA-256:	044527A735B287BD84D2AE6D2D3B89C85B52C9750BB07E5AEF19FB8F28F0442B
SHA-512:	C493FBD6926006108E56E23BB204BFE59A7364ED6D2409B5B258D9EA6C060259E13A7E7A22021607F6EDD55EEA52C75DFE7FCF18BB76D6E539FBD763BF399185
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/cascade.component.authoring/dynamicclientsidelibs/handlerscripts/v1.min.ACSHASHd7106db242c2b41f88a1b02418bec7e2.js
Preview:	'use strict';var DynamicClientSideScriptHandler=function(){return{fetchScriptLink:function(b){var a=(a=document.querySelector('div[data-identifier\x3d"'+b+'"]'))?a.getAttribute("data-content"):null;null===a&&(a=(b=document.querySelector('meta[name\x3d"'+b+'"]'))?b.getAttribute("content"):null);return a}}}();

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	377
Entropy (8bit):	4.948582331202056
Encrypted:	false
SSDEEP:	6:xc5H4RR6DV2qPJC0nR/d4oW6bG1bNY5H4HeLc6NV0P+rH4G+De:xjRRS28D4oW6KNYeHF6NV0PJG2e
MD5:	6B01DBCDA2D2C4037BA9458AE4B78DC6
SHA1:	7E6544E2BC1291BE62E10C226B3C6C81D4BA5DA5
SHA-256:	119CD9F507F36ED843C4C7391DBBB8DCDC333D4ADC43656372831EEF75085DA1
SHA-512:	B58217253F6E567DC45D8DB4EC42154463C336288F3C10A8CB8FCBBF011308D771B49070BF512D3AB66041E48EA2E6DB56542D768F15440900D170261A28847C
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/privacy/components/content/expand-collapse/v1/expand-collapse/clientlibs/site.min.ACSHASH6b01dbcda2d2c4037ba9458ae4b78dc6.css
Preview:	.hidden{display:none}..expand-collapse-toggle-btn{box-sizing:border-box;color:#000;display:block;font-family:"Segoe UI";font-size:16px;height:30px;line-height:25px;text-size-adjust:100%;unicode-bidi:isolate;width:745.51px}..expand-collapse-toggle-btn a{word-wrap:break-word;color:#006fc9;font-weight:400;cursor:pointer}..expand-collapse-toggle-btn a:hover{text-decoration:none}

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	downloaded
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/shell/_scrf/js/themes=default/54-af9f9f/d4-fb1f57/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/f9-a5b2ce/db-bc0148/dc-7e9864/6d-c07ea1/6f-dafe8c/f6-aa5278/73-a24d00/6d-1e7ed0/b7-cadaa7/c4-898cf2/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/d0-e64f3e/92-10345d/79-499886/7e-cda2d3/58-ab4971/ca-108466/e0-3c9860/de-884374/1f-100dea/33-abe4df/2b-8e0ae6?ver=2.0&_cf=02242021_3231&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7862)
Category:	downloaded
Size (bytes):	130062
Entropy (8bit):	5.328666829261192
Encrypted:	false
SSDEEP:	3072:BkDsmoyfhaJaOfNPN5/4OYQk9qNeUyMLBRMj:BkZXfQJaw8
MD5:	4411FD3E4BAB5C34A5D00D9B0EAE4E7F
SHA1:	5669A3FC4F201A8A3C78E7A77712826D315C505D
SHA-256:	519174C13B319EF2610E0A44ECD08F62DE989760C3083A16BD9D8399443BB49B
SHA-512:	144B5BDA16F3B36E99D0E15556A28A0A039E8132EFF6FD8853B2AB5D9378A5D0BC07DF4319313552DC38EE17D4C828877FEF957BBBDA5AFC33542A65122AC2E0
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-base.min.ACSHASH4411fd3e4bab5c34a5d00d9b0eae4e7f.js
Preview:	/******************************************************************************. Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. ******************************************************************************/.if (window.Element && !Element.prototype.closest) {. // eslint valid-jsdoc: "off". Element.prototype.closest =. function(s) {. "use strict";. var matches = (this.document \|\| this.ownerDocument).querySelectorAll(s);.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 38x38, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	470
Entropy (8bit):	7.485290849883525
Encrypted:	false
SSDEEP:	12:bs5Fsvr85kJqb4p7iNHYQ7vqxhYWp95TS1b0vY8dlWwO:bs5Fsg5iqiiHYQ7yxqiG18dhO
MD5:	DB9168A9BE8845A661F8C0747CDB6811
SHA1:	C352549195E699B0314141637891A1C568354F1C
SHA-256:	A9D60865EB55B2FC276DF2B73596C3E29A4E2BC945D3F74E738A2AA6ECEB70E6
SHA-512:	3FA22AD620F27E58BBD3A0E84064268FA24DEF9FC15360D8158B8699CBDB7677255DD940AD8FFF08CC597437D5E2A48A7ADF2C97015B76E13EC14AF4A3D8D8CD
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....p....&.&.>E..D"....V.(.D......#........>K/..D..1.........?.=....O.w..3.3K..._".L2.....&i.6.q..o9...`...h.=.=........2..6......?.f.w..:.......)..#J]i.0..5...x.j.c.M\.F..x`T.....n.E.Rm.?..l.. ......".K=A.#{<..........`.).t.....W.}(.$O.8..#.4M..USJ...,=K..&.N.$'j'..@.F....7.T....g..M....dC^..f.....r..A...@Q...T._.M...4./c....D&..d...@.?....$o.i7~....W.{..6..~.0...U...7..mK{.Z.o..w.e........'G...$..`.n5..o.='u..A.y...9.......K....

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	557
Entropy (8bit):	5.017920631493034
Encrypted:	false
SSDEEP:	12:DEARGUGLqcidEEblemSFxEARuWGBUGLqcSWGBdEEbleeESFZ:D1Jcsl21uWHcSWilv
MD5:	A722775809D2312F435036DEF15BCD62
SHA1:	2C6CF2D7ED0D1810B6C96269A4509071575E5771
SHA-256:	4DF68C42ED06B94BC6C7655FFA3F84487DCF88F2452B8BF43C217427E36E31A2
SHA-512:	3A4325C787C32BB7373B73CF419E94200167AA7CF2E689E4E1F8D46C8D9DE7607A4EAA3A346F25C3711723A30C678DE61F8813EBF81EEB66EA536968825F6B43
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/microsoft/components/content/back-to-top-button/v1/back-to-top-button/clientlibs/sites.min.ACSHASHa722775809d2312f435036def15bcd62.css
Preview:	@media screen and (max-width:540px){.sticky.back-to-top.stuck{position:static}.}.@media screen and (min-width:540px){.sticky.back-to-top.pageHasChatContainer{bottom:32px !important;left:12px}.}.div.backToTopEditView[data-mount='back-to-top']{opacity:1 !important}.@media screen and (max-width:540px){.fixed-sticky.fixed-back-to-top.stuck{position:static}.}.@media screen and (min-width:540px){.fixed-sticky.fixed-back-to-top.pageHasChatContainer{bottom:32px !important;left:12px}.}.div.backToTopEditView[data-mount='fixed-back-to-top']{opacity:1 !important}

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (584)
Category:	dropped
Size (bytes):	6679
Entropy (8bit):	5.376180402604044
Encrypted:	false
SSDEEP:	192:f+oeo1VY+B3F0qyNJ0kmyQ3BiLuAH+BDmOXMkuU:f+oeo1rZFV2LQ3w6AH+JmOXMkt
MD5:	FEB2D7B9574C6B769175093E3A05C4D2
SHA1:	7129DD82A3545C537A21AF43C9A17E5CB3E14274
SHA-256:	868371BEB7D0A2FDF03849D1A4DAB6E70D6577E8FF5272C58547820651AED842
SHA-512:	9D7D47B836C04F7873243D3C90202CED0F98EBBFB0BEEA543B6D467C2B0F464F2E8B9A3082DD8FE5821B0EEABFCC3FD4469C8448DABD4463DF8A09E9347A357E
Malicious:	false
Reputation:	low
Preview:	'use strict';(()=>{function l(f){var e=F[f];if(void 0!==e)return e.exports;e=F[f]={exports:{}};return H[f](e,e.exports,l),e.exports}var H={8713:()=>{$(function(){function f(){-1!==document.cookie.indexOf("".concat("Cascade.AuthSSO","\x3d"))&&(document.cookie="".concat("Cascade.AuthSSO","\x3d; expires\x3dThu, 01 Jan 1970 00:00:00 UTC;"))}function e(){var a=function(){var d=document.cookie.match(/(^\|;\s)(Cascade.AuthSSO)=([^;])/);return d?(d=parseInt(decodeURIComponent(d[3])),!isNaN(d)&&d>m.DefaultAttempted?.m.SharedStateAttempted:m.DefaultAttempted):m.NotAttempted}(),c=!(!window.msauthRpsShare\|\|b.accountConstraint===v.AAD);if(a===m.NotAttempted\|\|c&&a!==m.SharedStateAttempted)!function(d){$("#".concat("cascadeauthsso")).remove();var g=document.createElement("iframe");g.src=d;g.setAttribute("width","0");g.setAttribute("height","0");g.setAttribute("border","0");g.setAttribute("frameborder","0");g.setAttribute("style","display: none");g.id="cascadeauthsso";document.body.appendChild(g)}(""

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	159
Entropy (8bit):	4.661188988961239
Encrypted:	false
SSDEEP:	3:agWqLss4aXD5R20gJYRnd7HtOx1L5HQhLIzseX5LxfYLk21:QqPXD5bDRd7H8L5whLzeJSI21
MD5:	C22EA5B46F3FCAD90DA0ABCC0A3F73D4
SHA1:	2DB789C63AFB63D98932D7B55907DC3508E318B4
SHA-256:	8334DAA260516BB896407461E5F10E8E3041B06C56846BBB9D3435C6E77513AD
SHA-512:	A0359F8C25DC40CEFFD14A41BA81794717B99DABE78CBF8A8678F3E3EC57F317388CA0DC55B1CC6AD2D6C13D2B3CAEB5A64527BB2C646ED2D93775437DA646F1
Malicious:	false
Reputation:	low
Preview:	'use strict';function isFeatureEnabled(b){var a=document.getElementById("customFeatureControl").getAttribute("enabledFeatures");return null!=a&&a.includes(b)};

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	73
Entropy (8bit):	4.585229656006494
Encrypted:	false
SSDEEP:	3:agW3eJqX2SpR33DcqYfJn:QQ9SplDcqIJ
MD5:	6EDB6D700CAA816EBCCC443824A6A626
SHA1:	958C30C942382BD969CE7BA7294FE7F7DD7DC079
SHA-256:	93C3F4476867AD3AA6CBFC9A2BB9321F701F499058BA98403B79BB1B7892B572
SHA-512:	62046EE6C6DF84F892C46AAD114320A32A25B1A13C9770E1FB27C36E0840E23F6D79977CD6C5D70C118F8EB930672B60E8A4BA29D806BF0F8304AF1095A9E6DD
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/microsoft/components/structure/page/clientlibs/disable-all-cookies.min.ACSHASH6edb6d700caa816ebccc443824a6a626.js
Preview:	'use strict';Object.defineProperty(document,"cookie",{set:function(){}});

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27168, version 0.0
Category:	downloaded
Size (bytes):	27168
Entropy (8bit):	7.992922969154643
Encrypted:	true
SSDEEP:	768:5t+z+kiMy2C4rU03JPhE4lbMTAPZE6OekA:5t+Vyi3JXqTABEg
MD5:	B7640425501065524CEC27D4A55A85ED
SHA1:	F254C388A65EFB4B271C56DEB5685A77EBE09D9D
SHA-256:	FE8A1047376498C80A157D13555E42A92AD480FCB0BCC9DE51AD1930FBEB7F91
SHA-512:	9795975F44BCAE6B73979B221B1C544AC943BCE0ED485B266749559AE95D39641E09C458F2ED20F4667EFC80CA2C47DC6300AD4A3E5CE1D38AA94E014D61322A
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/light/latest.woff2
Preview:	wOF2......j .........i..........................`.....L........l....6.$........ ..0. ..i.C.'.9.@5..m.....1".X.13..(.......IE.....6.!s.K.=j.z.;q.......,..r....I..I..E.i..u........26.W.X....>e(<.M.R..^Y..e...+..pC.6.E9.l.$S..bn...)^.1.,..pj..<H....^v...b...\|t.....ys.XH.h.#.qF.....=W.x<q.d.m.^4....._...{...H......K.....ds.v...u{....:.....f$(t...DR.B._.p....m....jPf&e.F.Q..a.G.,.a$+.........f.k....@D{....p "B..X1+g.nN].n....W....?.:..K..D.,Y.....;I7.u.:...R.k...,....{+..Y.O`...W.xw.t..d.:...M}#`7"..\|...j.rW.....U.h..A.m`<..$h M....`..vx.w.Pi.3.}). . .Af.........n)P.w....Z.#N.6...@.e............#..B.<...H.HW......6<..)k[..%c....+O..RG0i...@.........J..3}...6..S.......'+8..ZFezY.r.%9)!n.T@.0vF.....y/..!.-.6..r?...#p\|Y.2...}...nB...6.$8.d:k.......r........ ..@.h.+.....5.H.n.3.P.58..\t..I.N.uB...@N@K.]Q..MIr..C:.{t...........F..*.)3.1J....f....Uzn.\o.#.=&h...t........:@BU....V@3..X.pD.C@ H...}.06...G........X.i]n.#<..K1`.,YV..o..<....ms.B.!..

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	728
Entropy (8bit):	4.45859083464866
Encrypted:	false
SSDEEP:	6:G2JvYVv8sIyZJvYVv8sryhPVSJvYVv8scVmoZJvYVv8qDxBIJvYVv8qcKAMAkqD4:jW1LW6heWcnLWH9BeWHc3kqDeWq5kji7
MD5:	DD46FB604C93F8A34A3AF71B3A631150
SHA1:	EE9288D598C990240E86CCBC8A843D27E4752A21
SHA-256:	6809384C61B988ABD82D23DBA0E9A9B2E17C773FA2F5104A982B93DE1B93B82E
SHA-512:	D99E887E385C1AF7A6066765FAD916F74E441F69E72425DADEE90EF0298FE351D2BAEDDF0A46B4E2BA37BD468E7131B62281D01DD0FF180CEAF7052EA8CD83B6
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/microsoft/components/content/inPageNavigationV2/v1/inPageNavigationV2/clientlibs/site.min.ACSHASHdd46fb604c93f8a34a3af71b3a631150.css
Preview:	.inPageNavigationV2 .nav-in-page-bar .nav-in-page-container .nav-in-page .nav-child-items{margin-bottom:10px}..inPageNavigationV2 .nav-in-page-bar .nav-in-page-container .nav-in-page .nav-in-subheading-item{font-weight:600}..inPageNavigationV2 .nav-in-page-bar .nav-in-page-container .nav-in-page .child-link{margin-left:20px}..inPageNavigationV2 .nav-in-page-bar .nav-in-page-container .nav-in-page-footer{margin-left:1rem}..inPageNavigationV2 .nav-in-page-bar .nav-in-page-container .nav-in-page-footer .nav-footer-item{margin-right:40px;margin-top:40px;margin-bottom:20px}..inPageNavigationV2 .nav-in-page-bar .nav-in-page-container .nav-in-page.combobox-menu{position:relative}..inPageNavigationV2 .row{margin-right:1.25rem}

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	175
Entropy (8bit):	4.68043398329258
Encrypted:	false
SSDEEP:	3:agWqLs3KOBmKL8ELDSzEfYZBAeOE8c/yCN9xGV9LH1CNILWAcELDlpKOBmKL8ELQ:QqtgLSH9xGf1OILWAfkgXe
MD5:	96F0C5B1219E39B8788028F5C17A5AD9
SHA1:	D6DCE0DE065B0D13905EAEDA0BA5C0DEA3D8F67C
SHA-256:	1FC2BCE2D46DF4565B8C488B22225CFE7ADB7C37CC9A542D4F85B61995B306CB
SHA-512:	057810FA0558506C6B8ABECB1A7A58FF61DA0609B3A5798BB42DE3A9B801CA0D8B20C4C1F9A250EE33D30492452CC5C4553332B16300408AA0C45B1515D4AF10
Malicious:	false
Reputation:	low
Preview:	'use strict';function AEMOnCookieConsentChangedCallback(a){}if("undefined"!=typeof WcpConsent&&null!=WcpConsent)WcpConsent.onConsentChanged(AEMOnCookieConsentChangedCallback);

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (514)
Category:	dropped
Size (bytes):	941
Entropy (8bit):	5.237500495085018
Encrypted:	false
SSDEEP:	24:IlxCSVYfo4ydsethmnUitaKKklq93+TEDN:IlAsdbtKUitaKHCsEDN
MD5:	A1887C9F524FA5E9982AA5F04B988625
SHA1:	E85FBA4E436A6FCBDD5F1DBB1C9A6468DD9DDE78
SHA-256:	F0D2B69332C34A689A07C6A57B5B65B83A83EFE29A5375D8735924500ABB1FF1
SHA-512:	E7FE3E587B02689146CAEFE363BADDEF7EF2BC77604405CBE0DA8D2A0C7A2B899CB1C811A302852E6B88009982E03E27A0FEB546C9E2B6E6A4EEAEED9CBD5B4A
Malicious:	false
Reputation:	low
Preview:	'use strict';(()=>{function c(b){var a=e[b];if(void 0!==a)return a.exports;a=e[b]={exports:{}};return f[b](a,a.exports,c),a.exports}var f={7505:()=>{$(function(){$(".area-heading p a").each(function(b,a){b=$(a).closest("div.row").find("h1,h2,h3,h4,h5,h6");a.dataset.biCn=a.innerText;a.dataset.biEcn=a.innerText;a.dataset.biCompnm="Area Heading";a.dataset.biBhvr="0";a.dataset.biCt="Link";a.dataset.biPa="Body";b=b.first();b.text()&&""!==b.text()&&(a.dataset.biHn=b.text().trim(),a.dataset.biEhn=b.text().trim())});.document.querySelectorAll(".areaheading sup").forEach(function(b){0==b.children.length&&b.insertAdjacentHTML("afterbegin",'\x3cspan class\x3d"sr-text"\x3eFootnote\x3c/span\x3e')})})}},e={};c.n=b=>{var a=b&&b.__esModule?()=>b.default:()=>b;return c.d(a,{a}),a};c.d=(b,a)=>{for(var d in a)c.o(a,d)&&!c.o(b,d)&&Object.defineProperty(b,d,{enumerable:!0,get:a[d]})};c.o=(b,a)=>Object.prototype.hasOwnProperty.call(b,a);c(7505)})();

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.327819531114783
Encrypted:	false
SSDEEP:	3:Aq7KKlMT9:AqeKWT9
MD5:	A8A3710424DC6E0DFF393C6964441BDB
SHA1:	E4978066791DD394BDDD174F2687A7CDD43442B2
SHA-256:	46CD047CC0D3D10776E2F50D4C9D55DB58BD97D7A95B7D691F53D4937C71CF00
SHA-512:	EE135EE50868E59853C8FE57A9471AE1FBBDE30A929D33B4A4D56200E70C93AFDFF0301EF7FEBC803258C2BA2DCBC183E632B2ADA1745D3C87C1EEB98E8DEE62
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASHa8a3710424dc6e0dff393c6964441bdb.css
Preview:	[class*="z-"]{position:relative}

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (889)
Category:	dropped
Size (bytes):	92962
Entropy (8bit):	5.482012211093105
Encrypted:	false
SSDEEP:	1536:wB4vGoYlmQr+IDv1Ty/6RsSz5TGF/46nNUgDbC03vu9FnHKDfa6Z/VUhdIKq6Tjv:wqxNrNG9FnHKD/oIKq6Tjv
MD5:	35986A813756F39AB6B922979FFEDB03
SHA1:	C8E2213BBAFAF535DA9C6676F3DBA43449E4D15A
SHA-256:	E2D92BDAAD925C6D355331A338384EE3FF82492352975DD4EFDA791AEF4AB3F5
SHA-512:	289F1C432E73F611D54EB1130013174174222A0C5EEF8E2464C5FD51EE33DC702326EEECA80B2AAE213DB2FCCB149297FC37CC9A0B6CF6E928A66BC27843F930
Malicious:	false
Reputation:	low
Preview:	/. jQuery JavaScript Library v3.5.1. https://jquery.com/.. Includes Sizzle.js. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://jquery.org/license.. Date: 2020-05-04T22:49Z. Sizzle CSS Selector Engine v2.3.5. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://js.foundation/.. Date: 2020-03-14./.'use strict';(function(H,Sa){"object"===typeof module&&"object"===typeof module.exports?module.exports=H.document?Sa(H,!0):function(Ta){if(!Ta.document)throw Error("jQuery requires a window with a document");return Sa(Ta)}:Sa(H)})("undefined"!==typeof window?window:this,function(H,Sa){function Ta(a,b,c){c=c\|\|M;var d,f=c.createElement("script");f.text=a;if(b)for(d in Kc)(a=b[d]\|\|b.getAttribute&&b.getAttribute(d))&&f.setAttribute(d,a);c.head.appendChild(f).parentNode.removeChild(f)}function Ia(a){return null==.a?a+"":"object"===typeof a\|\|"function"===typeof a?db[Ob.call(a)]

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (517)
Category:	downloaded
Size (bytes):	1597
Entropy (8bit):	5.033020564569672
Encrypted:	false
SSDEEP:	48:ThmThFaVSyEYQelMM3flM3bt/Hlz6iU5cy:TQ4lTehvla
MD5:	90F42B4A061B05CD33D18DC7D3A433E8
SHA1:	8FDE605A48BB3B23F5F18A4522AEA7E29575251A
SHA-256:	872BCF65FA9E3E4BC4B4ABBD343D119CFF5B872157345A6B06838E9660F777D9
SHA-512:	3849342F8EFC3718B37B1C2BEEEF0510B3C7EADC3C929712BBE7FF43F133C97EBC45E1608FF6C2C185F0A7F7AEC2A1AC131EA8BC2B89004B81B717C113E6311E
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/privacy/components/content/expand-collapse/v1/expand-collapse/clientlibs/site.min.ACSHASH90f42b4a061b05cd33d18dc7d3a433e8.js
Preview:	'use strict';$(function(){function e(b,a){b.find(".expand-btn").toggleClass("hidden");b.find(".collapse-btn").toggleClass("hidden");b.find(".detail-content").toggleClass("hidden");b.find(".summary-content").toggleClass("hidden");b=$(b).find("."+a);0<b.length&&(a=b.offset().top-100,$("html, body").animate({scrollTop:a},"slow"));$(b).focus();b="true"===$(this).attr("aria-expanded");$(this).attr("aria-expanded",!b)}$(document).ready(function(){$(".expand-collapse-toggle-btn .collapse-btn").attr({tabindex:0,.role:"button","aria-controls":"summary-content","aria-expanded":!1}).on("click keydown",function(a){if("click"===a.type\|\|"Enter"===a.key\|\|" "===a.key)a=$(this).closest(".expand-collapse-content"),e(a,"summary-content")});$(".expand-collapse-toggle-btn .expand-btn").attr({tabindex:0,role:"button","aria-controls":"detail-content","aria-expanded":!1}).on("click keydown",function(a){if("click"===a.type\|\|"Enter"===a.key\|\|" "===a.key)a=$(this).closest(".expand-collapse-content"),e(a,"detail-

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 26288, version 0.0
Category:	downloaded
Size (bytes):	26288
Entropy (8bit):	7.984195877171481
Encrypted:	false
SSDEEP:	768:56JqQaQphRbTHiKNF5z/02h5KpJW3pPOA8Y9g/:gdTTH5XKpJWdH1W/
MD5:	D0263DC03BE4C393A90BDA733C57D6DB
SHA1:	8A032B6DEAB53A33234C735133B48518F8643B92
SHA-256:	22B4DF5C33045B645CAFA45B04685F4752E471A2E933BFF5BF14324D87DEEE12
SHA-512:	9511BEF269AE0797ADDF4CD6F2FEC4AD0C4A4E06B3E5BF6138C7678A203022AC4818C7D446D154594504C947DA3061030E82472D2708149C0709B1A070FDD0E3
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff
Preview:	wOFF......f........D........................OS/2...X...H...`JM.FVDMX.............^.qcmap..............9cvt ...4... .......fpgm...T.......Y...gasp...D............glyf...P..U5.......head..]....2...6...Chhea..]........$$...hmtx..]..........ye'loca..^............Gmaxp..`.... ... ./..name..`....8....]..Rpost..f........ .Q.wprep..f$........x...x.c`.Pf......:....Q.B3_dHc..`e.bdb... .`@..`......./9.\|...V...)00...-.Wx...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...mL.U.............9.x.`[...&BF@X...V.h.Z..h......`n....[..U

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1998)
Category:	downloaded
Size (bytes):	530473
Entropy (8bit):	5.1558754449004525
Encrypted:	false
SSDEEP:	12288:cJpYYYb5T2ZggigVl1e/zXJ5lbgutNPzedZTyatWYLe8dZshIw:cJpYb5T2Zggigv1e/zXJLbgunzedZTyT
MD5:	13ABF4CF4F8384D04A599349524DBBAD
SHA1:	BD1EE95DB4A6E7A1EE1937F47AD7C5B6D7633465
SHA-256:	3E7CE05C8874B9F3628300101F40878DF98F23A09CD4ECC9C9E5CC8067D9068A
SHA-512:	4FCA93D865844FFF1A452B343F75ED786111F1E508505DD841F954159A42E5B9CB587FDC8ADEEA431A14CD042FC4CF16305416CE4CA0C1E9D5E66803C2BD03A7
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/main-light.min.ACSHASH13abf4cf4f8384d04a599349524dbbad.js
Preview:	./!. MWF (Moray) Extensions v2.15.1. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2022 The Bootstrap Authors and Twitter, Inc.. * Copyright .2022 W3C. (MIT, ERCIM, Keio, Beihang).. */..(function (global, factory) {..typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :..typeof define === 'function' && define.amd ? define(['exports'], factory) :..(global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, factory(global.mwf = {}));.})(this, (function (exports) { 'use strict';...var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};...var check = function (it) {.. return it && it.Math == Math && it;..};...// https://github.com/zloirock/core-js/issues/86#issuecomment-115759028..var global$a =.. // eslint-disable-next-line es/no-global-this -- safe.. check(typeof globalTh

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	downloaded
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-eus-prod/shell/_scrf/js/themes=default/54-af9f9f/d4-fb1f57/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/f9-a5b2ce/db-bc0148/dc-7e9864/6d-c07ea1/6f-dafe8c/f6-aa5278/73-a24d00/6d-1e7ed0/b7-cadaa7/c4-898cf2/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/d0-e64f3e/92-10345d/79-499886/7e-cda2d3/58-ab4971/ca-108466/e0-3c9860/de-884374/1f-100dea/33-abe4df/2b-8e0ae6?ver=2.0&_cf=02242021_3231&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28908, version 0.0
Category:	downloaded
Size (bytes):	28908
Entropy (8bit):	7.989764549602985
Encrypted:	false
SSDEEP:	768:ncxMT2KlhUWbYQhHETORZaoTMJYfWHwRytVfQwg:nBaXgYQ9EyaoYOfSfo
MD5:	72095568168D6A31E051E4D531759151
SHA1:	8EBE72EF4631721D800AAC28D854C1D1B952FE24
SHA-256:	6BA0D1A726F1887BD61727B308ED0BE0E73EDBA17D4AD11B91AB19B632E078F6
SHA-512:	17F1417D99D76E46601D483F8516731E18CA028221A57C53D557E00F9627234576D62EB3AB5EB5FAA13EBC1D8BFF047AC86B1499756BEE22FFB76B998B7B19A4
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/semilight/latest.woff2
Preview:	wOF2......p...........p..........................`.....L..e.....T..].6.$........ ..b. ..Y...u.l....f.&......M.../....?..3p\.u.P..zOBE...x.I..T.;.....48.G..H..k..8...X..!...&M).)...{^..#.r.x...h...>.....f......^......gBP#40,.....%.f$..YD...i.`/p,..\.... &eNI.X.?.n+JP.4.g9...lq1.lA.D....E.1..;3.h.Y..ic.-.....V........:.......f.@..!....l.M-.XHJ..MH.H.)w......UN...O.u.3....Z.X..W..#... U ...,.=6P.@..4=.M.a..f.uO{....6d.6.:n....gx..M.s..jB.J..9M.&....R'fd..7....T=...Uu...d.....aQ...Vg.......}<........>@..]?)..T..)..H>..R@..J...Z(.4ePr. ] .A).H.J/..1.\..a.eY...oY.....k!b.......k..(............!...fc.....=@.h.#..-.L........y=.ic..2.P...fx.AJ....5-.(...o.t.+<h.aX0}\|G/.uYx..A.g.^o..S.F...3D....J....."....j.......a$6.....FG..1.a.2......'.g..95 4.h..VL+...Jf.V.+.U.e.Ia.Hc.v..i....dvF....n.zC...........c.La..d..AY.G.U\.B5TOM.A.4.6....4.L...cX...V....O.L..]B{.;./.s...\|..O$....y?.g.=>.G;...w.n....y.<un8..E.[.......?.....].e}^..FE....=:..Du......7.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	184
Entropy (8bit):	4.7576002313728605
Encrypted:	false
SSDEEP:	3:iAE3BMiX4RXBMgX/UfVgVISfKxW4qUu5UtgseBWBZ8VNZOjmeJRNnXE1V+o+:iAE36iIsgP0KOFMLs9cVNKmV+o+
MD5:	8396009A793FDA25F0AD1C495EC773F4
SHA1:	C0143C8B9F459323B1AE10D739835E5C8546DC0D
SHA-256:	D660C1B711D4F046EC54D6681BF6B8664875AFA538957C7A9A874A9D09001D4F
SHA-512:	C11201AF295FB01B5B585CB3BE448E0573ED5B96C4FB24B2E63809CDE741D2B1903F00FCA14F760262E7045C6FAC47545C4B3D4E45F94A4C28C51B59AD6ECC38
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/microsoft/components/content/areaheading/v1/areaheading/clientlibs/site.min.ACSHASH8396009a793fda25f0ad1c495ec773f4.css
Preview:	.areaheading .sr-text{border:0;clip:rect(1px,1px,1px,1px);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal !important}

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (473)
Category:	dropped
Size (bytes):	787
Entropy (8bit):	4.972252532759549
Encrypted:	false
SSDEEP:	24:c0roo76A66karcPnAo6rG86YPN77n0V4SbpZRAok8Aod:Jh76j6tcP8jV7LPSYo
MD5:	A04DDB3F2A2A88B7FB0FA381365BD905
SHA1:	91E89F4682C9E1BCADCD07813267DE6E02E64DE7
SHA-256:	3DBFC4620BA5D33A67DD3719D2E981D894846AFE8E9E8C857AB96222C0B840B1
SHA-512:	29D9F73464AFA81041597783C8F1C48709B8221470F6C3DFFD2E40865A109809ABC0D4A5D7E1AB485EDEDA4EA62434512B6C0FD993236A170CFD3AD96B072EAD
Malicious:	false
Reputation:	low
Preview:	'use strict';$(function(){var a=$(".scrollspy-container");if(a&&1==a.length){a=$(".nav-in-page-container").attr("id");var b=$("body");b.attr("data-active-class","active");b.attr("data-target","#"+a);new mwf.Scrollspy({el:document.querySelector("body")})}});.function updateButtonVisibility(){var a=document.querySelector("nav.nav-in-page-container"),b=document.querySelectorAll("nav.nav-in-page-container li"),c=document.querySelector("div.nav-in-page-footer"),e=document.querySelector(".nav-in-page-main-content");if(a){var f=a.classList.contains("combobox");b.forEach(function(d){if(d=d.querySelector(".btn"))d.style.display=f?"none":""});c&&e&&(f?e.appendChild(c):a.appendChild(c))}requestAnimationFrame(updateButtonVisibility)}.window.addEventListener("load",updateButtonVisibility);

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.68043398329258
Encrypted:	false
SSDEEP:	3:agWqLs3KOBmKL8ELDSzEfYZBAeOE8c/yCN9xGV9LH1CNILWAcELDlpKOBmKL8ELQ:QqtgLSH9xGf1OILWAfkgXe
MD5:	96F0C5B1219E39B8788028F5C17A5AD9
SHA1:	D6DCE0DE065B0D13905EAEDA0BA5C0DEA3D8F67C
SHA-256:	1FC2BCE2D46DF4565B8C488B22225CFE7ADB7C37CC9A542D4F85B61995B306CB
SHA-512:	057810FA0558506C6B8ABECB1A7A58FF61DA0609B3A5798BB42DE3A9B801CA0D8B20C4C1F9A250EE33D30492452CC5C4553332B16300408AA0C45B1515D4AF10
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-cookieconsent.min.ACSHASH96f0c5b1219e39b8788028f5c17a5ad9.js
Preview:	'use strict';function AEMOnCookieConsentChangedCallback(a){}if("undefined"!=typeof WcpConsent&&null!=WcpConsent)WcpConsent.onConsentChanged(AEMOnCookieConsentChangedCallback);

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65298)
Category:	downloaded
Size (bytes):	372649
Entropy (8bit):	5.092497147126706
Encrypted:	false
SSDEEP:	6144:hkz1b3b99G9gR7N1xf6ilX1b3b99G9gR7N1xf6iPyD1b3b99G9gR7N1xf6ilfsPQ:6YfW1fvh8
MD5:	C34FA6955BE9497F516B1D185D1450D8
SHA1:	C2B45C4572E6B0398E3703CCFC1746D7D6CFC582
SHA-256:	F6895205E6AFDDAB2E56E315FB74F0016F5ECD70F163FA978BB88504E8512398
SHA-512:	56D1919BD4B6E00B43B9DBFE63E8570EDEAB2A4718EFD6A92ED3198835252CB5D817ABE625B166245C49AAD95FD99389680E2AA1BC083053980E6A8A6FFCDC5E
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/alfa/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/main-light.min.ACSHASHc34fa6955be9497f516b1d185d1450d8.css
Preview:	@charset "UTF-8";/!. MWF (Moray) Extensions v2.15.1. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2022 The Bootstrap Authors and Twitter, Inc.. * Copyright .2022 W3C. (MIT, ERCIM, Keio, Beihang).. */@font-face{font-family:MWF-FLUENT-ICONS;src:url(resources/fonts/MWFFluentIcons.woff2?v=2.15.1) format("woff2"),url(resources/fonts/MWFFluentIcons.woff?v=2.15.1) format("woff"),url(resources/fonts/MWFFluentIcons.ttf?v=2.15.1) format("truetype")}@font-face{font-family:SegoeUI;src:local("Segoe UI"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2) format("woff2"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff) format("woff"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.ttf) format("ttf");font-weight:400}@font-face{font-family:SegoeUI;src:local("Segoe UI"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/light/latest.woff2) format("woff2"),url(//c.s-micros

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	73
Entropy (8bit):	4.585229656006494
Encrypted:	false
SSDEEP:	3:agW3eJqX2SpR33DcqYfJn:QQ9SplDcqIJ
MD5:	6EDB6D700CAA816EBCCC443824A6A626
SHA1:	958C30C942382BD969CE7BA7294FE7F7DD7DC079
SHA-256:	93C3F4476867AD3AA6CBFC9A2BB9321F701F499058BA98403B79BB1B7892B572
SHA-512:	62046EE6C6DF84F892C46AAD114320A32A25B1A13C9770E1FB27C36E0840E23F6D79977CD6C5D70C118F8EB930672B60E8A4BA29D806BF0F8304AF1095A9E6DD
Malicious:	false
Reputation:	low
Preview:	'use strict';Object.defineProperty(document,"cookie",{set:function(){}});

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7862)
Category:	dropped
Size (bytes):	130062
Entropy (8bit):	5.328666829261192
Encrypted:	false
SSDEEP:	3072:BkDsmoyfhaJaOfNPN5/4OYQk9qNeUyMLBRMj:BkZXfQJaw8
MD5:	4411FD3E4BAB5C34A5D00D9B0EAE4E7F
SHA1:	5669A3FC4F201A8A3C78E7A77712826D315C505D
SHA-256:	519174C13B319EF2610E0A44ECD08F62DE989760C3083A16BD9D8399443BB49B
SHA-512:	144B5BDA16F3B36E99D0E15556A28A0A039E8132EFF6FD8853B2AB5D9378A5D0BC07DF4319313552DC38EE17D4C828877FEF957BBBDA5AFC33542A65122AC2E0
Malicious:	false
Reputation:	low
Preview:	/******************************************************************************. Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. ******************************************************************************/.if (window.Element && !Element.prototype.closest) {. // eslint valid-jsdoc: "off". Element.prototype.closest =. function(s) {. "use strict";. var matches = (this.document \|\| this.ownerDocument).querySelectorAll(s);.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 18:30:22.670265913 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 23, 2024 18:30:22.670284033 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 23, 2024 18:30:22.779427052 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 23, 2024 18:30:32.292983055 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 23, 2024 18:30:32.385982037 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 23, 2024 18:30:32.462719917 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 23, 2024 18:30:34.179493904 CEST	443	49705	23.1.237.91	192.168.2.5
Oct 23, 2024 18:30:34.179603100 CEST	49705	443	192.168.2.5	23.1.237.91
Oct 23, 2024 18:30:36.119462967 CEST	49716	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:30:36.119571924 CEST	443	49716	216.58.206.68	192.168.2.5
Oct 23, 2024 18:30:36.119672060 CEST	49716	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:30:36.119872093 CEST	49716	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:30:36.119895935 CEST	443	49716	216.58.206.68	192.168.2.5
Oct 23, 2024 18:30:36.619064093 CEST	49718	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:36.619090080 CEST	443	49718	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:36.619165897 CEST	49718	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:36.620717049 CEST	49718	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:36.620731115 CEST	443	49718	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:36.982126951 CEST	443	49716	216.58.206.68	192.168.2.5
Oct 23, 2024 18:30:36.982393980 CEST	49716	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:30:36.982425928 CEST	443	49716	216.58.206.68	192.168.2.5
Oct 23, 2024 18:30:36.984070063 CEST	443	49716	216.58.206.68	192.168.2.5
Oct 23, 2024 18:30:36.984158993 CEST	49716	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:30:36.985021114 CEST	49716	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:30:36.985102892 CEST	443	49716	216.58.206.68	192.168.2.5
Oct 23, 2024 18:30:37.039865017 CEST	49716	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:30:37.039887905 CEST	443	49716	216.58.206.68	192.168.2.5
Oct 23, 2024 18:30:37.086299896 CEST	49716	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:30:37.484402895 CEST	443	49718	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:37.484483957 CEST	49718	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:37.488380909 CEST	49718	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:37.488399982 CEST	443	49718	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:37.488820076 CEST	443	49718	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:37.539194107 CEST	49718	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:37.579332113 CEST	443	49718	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:37.782608032 CEST	443	49718	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:37.782820940 CEST	49718	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:37.782820940 CEST	49718	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:37.782881975 CEST	443	49718	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:37.782921076 CEST	443	49718	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:37.832375050 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:37.832484961 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:37.832567930 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:37.832840919 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:37.832873106 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:37.970516920 CEST	49722	443	192.168.2.5	35.186.249.72
Oct 23, 2024 18:30:37.970561028 CEST	443	49722	35.186.249.72	192.168.2.5
Oct 23, 2024 18:30:37.970632076 CEST	49722	443	192.168.2.5	35.186.249.72
Oct 23, 2024 18:30:37.970824957 CEST	49722	443	192.168.2.5	35.186.249.72
Oct 23, 2024 18:30:37.970853090 CEST	443	49722	35.186.249.72	192.168.2.5
Oct 23, 2024 18:30:37.976464033 CEST	49723	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:30:37.976486921 CEST	443	49723	108.138.7.18	192.168.2.5
Oct 23, 2024 18:30:37.976545095 CEST	49723	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:30:37.978430033 CEST	49723	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:30:37.978455067 CEST	443	49723	108.138.7.18	192.168.2.5
Oct 23, 2024 18:30:37.986664057 CEST	49724	443	192.168.2.5	150.171.28.10
Oct 23, 2024 18:30:37.986684084 CEST	443	49724	150.171.28.10	192.168.2.5
Oct 23, 2024 18:30:37.986746073 CEST	49724	443	192.168.2.5	150.171.28.10
Oct 23, 2024 18:30:37.987000942 CEST	49724	443	192.168.2.5	150.171.28.10
Oct 23, 2024 18:30:37.987024069 CEST	443	49724	150.171.28.10	192.168.2.5
Oct 23, 2024 18:30:38.037719011 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:38.037740946 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:38.037806988 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:38.038693905 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:38.038712025 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:38.063854933 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:38.063884020 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:38.063955069 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:38.064275980 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:38.064301014 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:38.070576906 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:38.070596933 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:38.070663929 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:38.072527885 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:38.072551966 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:38.073074102 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:30:38.073111057 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 23, 2024 18:30:38.073173046 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:30:38.073415041 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:30:38.073431015 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 23, 2024 18:30:38.613106966 CEST	443	49722	35.186.249.72	192.168.2.5
Oct 23, 2024 18:30:38.613339901 CEST	49722	443	192.168.2.5	35.186.249.72
Oct 23, 2024 18:30:38.613369942 CEST	443	49722	35.186.249.72	192.168.2.5
Oct 23, 2024 18:30:38.615040064 CEST	443	49722	35.186.249.72	192.168.2.5
Oct 23, 2024 18:30:38.615135908 CEST	49722	443	192.168.2.5	35.186.249.72
Oct 23, 2024 18:30:38.618880033 CEST	49722	443	192.168.2.5	35.186.249.72
Oct 23, 2024 18:30:38.618973017 CEST	443	49722	35.186.249.72	192.168.2.5
Oct 23, 2024 18:30:38.672133923 CEST	49722	443	192.168.2.5	35.186.249.72
Oct 23, 2024 18:30:38.672193050 CEST	443	49722	35.186.249.72	192.168.2.5
Oct 23, 2024 18:30:38.717082024 CEST	49722	443	192.168.2.5	35.186.249.72
Oct 23, 2024 18:30:39.770293951 CEST	443	49724	150.171.28.10	192.168.2.5
Oct 23, 2024 18:30:39.771322012 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:39.771629095 CEST	49724	443	192.168.2.5	150.171.28.10
Oct 23, 2024 18:30:39.771660089 CEST	443	49724	150.171.28.10	192.168.2.5
Oct 23, 2024 18:30:39.772562027 CEST	443	49724	150.171.28.10	192.168.2.5
Oct 23, 2024 18:30:39.772624016 CEST	49724	443	192.168.2.5	150.171.28.10
Oct 23, 2024 18:30:39.773300886 CEST	443	49724	150.171.28.10	192.168.2.5
Oct 23, 2024 18:30:39.773670912 CEST	49724	443	192.168.2.5	150.171.28.10
Oct 23, 2024 18:30:39.773685932 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:39.775903940 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:39.775914907 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:39.776190042 CEST	49724	443	192.168.2.5	150.171.28.10
Oct 23, 2024 18:30:39.776273012 CEST	443	49724	150.171.28.10	192.168.2.5
Oct 23, 2024 18:30:39.777028084 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:39.777096033 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:39.777983904 CEST	443	49723	108.138.7.18	192.168.2.5
Oct 23, 2024 18:30:39.778580904 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:39.778650999 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:39.779233932 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:39.779262066 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:39.779272079 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:39.780601978 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 23, 2024 18:30:39.780978918 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:30:39.780987978 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 23, 2024 18:30:39.781251907 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:39.781306982 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:39.782018900 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 23, 2024 18:30:39.782108068 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:30:39.782877922 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:39.782891989 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:39.783907890 CEST	49723	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:30:39.783917904 CEST	443	49723	108.138.7.18	192.168.2.5
Oct 23, 2024 18:30:39.784436941 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:39.784499884 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:39.785423994 CEST	443	49723	108.138.7.18	192.168.2.5
Oct 23, 2024 18:30:39.785487890 CEST	49723	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:30:39.785835981 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:39.785900116 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:39.789067030 CEST	49723	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:30:39.789150953 CEST	443	49723	108.138.7.18	192.168.2.5
Oct 23, 2024 18:30:39.789804935 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:39.789932013 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:39.792427063 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:30:39.792511940 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 23, 2024 18:30:39.794318914 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:39.794394016 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:39.803364038 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:39.803441048 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:39.804316998 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:39.813980103 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:39.820565939 CEST	49724	443	192.168.2.5	150.171.28.10
Oct 23, 2024 18:30:39.820626020 CEST	443	49724	150.171.28.10	192.168.2.5
Oct 23, 2024 18:30:39.835932970 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:30:39.835946083 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 23, 2024 18:30:39.835992098 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:39.836042881 CEST	49723	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:30:39.836050987 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:39.836057901 CEST	443	49723	108.138.7.18	192.168.2.5
Oct 23, 2024 18:30:39.836081028 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:39.836081028 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:39.836091042 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:39.836103916 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:39.855348110 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:39.866842985 CEST	49724	443	192.168.2.5	150.171.28.10
Oct 23, 2024 18:30:39.882371902 CEST	49723	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:30:39.882371902 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:39.882371902 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:39.882443905 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:30:39.882486105 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:40.060405970 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:40.060560942 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:40.060776949 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:40.086194038 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:40.086194992 CEST	49719	443	192.168.2.5	184.28.90.27
Oct 23, 2024 18:30:40.086261988 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:40.086296082 CEST	443	49719	184.28.90.27	192.168.2.5
Oct 23, 2024 18:30:42.317879915 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:42.317924023 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:42.318001986 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:42.318568945 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:42.318597078 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:43.135920048 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:30:43.136008024 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:43.136087894 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:30:43.137217999 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:30:43.137252092 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:43.552409887 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:43.552486897 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:43.552571058 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:43.552772999 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:43.552932978 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:43.553013086 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:43.564121962 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:43.564261913 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:43.564327002 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:43.647102118 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:43.647166967 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:43.647391081 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:43.647409916 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:30:43.647423029 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:43.647424936 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 18:30:43.952872992 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:43.953061104 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:30:44.017261028 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:30:44.017340899 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:44.018327951 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:44.068911076 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:30:44.394531012 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.394644022 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:44.396898985 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:44.396923065 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.397355080 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.406265974 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:44.447355986 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.649085999 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.649149895 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.649171114 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.649210930 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:44.649220943 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.649250984 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:44.649276018 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:44.764705896 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.764769077 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.764805079 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:44.764818907 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.764847994 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:44.764880896 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:44.880222082 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.880284071 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.880331039 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:44.880348921 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.880378962 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:44.880400896 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:44.996294975 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.996356964 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.996506929 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:44.996507883 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:44.996545076 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:44.997108936 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.112097025 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.112166882 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.112330914 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.112330914 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.112400055 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.113555908 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.227561951 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.227623940 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.227817059 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.227817059 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.227883101 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.227940083 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.342775106 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.342842102 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.342889071 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.342910051 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.342941999 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.342956066 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.458446980 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.458519936 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.458677053 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.458678007 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.458700895 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.458741903 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.505496979 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.505526066 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.505748987 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.505812883 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.505871058 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.563373089 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:30:45.607348919 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:45.620795965 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.620851040 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.620970011 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.620970011 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.620994091 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.621078968 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.730715990 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.730783939 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.730937958 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.730937958 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.731004000 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.731296062 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.805197954 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.805257082 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.805434942 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.805434942 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.805500984 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.805589914 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.815124989 CEST	49705	443	192.168.2.5	23.1.237.91
Oct 23, 2024 18:30:45.815448046 CEST	49705	443	192.168.2.5	23.1.237.91
Oct 23, 2024 18:30:45.820878029 CEST	443	49705	23.1.237.91	192.168.2.5
Oct 23, 2024 18:30:45.820910931 CEST	443	49705	23.1.237.91	192.168.2.5
Oct 23, 2024 18:30:45.826841116 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:45.826869965 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:45.826877117 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:45.826885939 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:45.826927900 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:45.827035904 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:30:45.827035904 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:30:45.827074051 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:45.827125072 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:30:45.827594995 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:45.827656984 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:30:45.827672958 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:45.828197956 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:45.828288078 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:30:45.873971939 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.874017954 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.874165058 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.874165058 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.874188900 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.874242067 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.920783043 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.920893908 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.920954943 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.920990944 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.921027899 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.921061039 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.937110901 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.937146902 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:45.937175035 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:45.937189102 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.108351946 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.108387947 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.108654022 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.108867884 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.108902931 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.108958960 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.110982895 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.111064911 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.111171007 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.111323118 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.111339092 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.111495018 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.111531019 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.113001108 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.113023996 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.113114119 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.113585949 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.113607883 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.113748074 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.113785028 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.115412951 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.115438938 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.115554094 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.115717888 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.115741968 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.148214102 CEST	49793	443	192.168.2.5	23.1.237.91
Oct 23, 2024 18:30:46.148242950 CEST	443	49793	23.1.237.91	192.168.2.5
Oct 23, 2024 18:30:46.148319006 CEST	49793	443	192.168.2.5	23.1.237.91
Oct 23, 2024 18:30:46.151165962 CEST	49793	443	192.168.2.5	23.1.237.91
Oct 23, 2024 18:30:46.151190996 CEST	443	49793	23.1.237.91	192.168.2.5
Oct 23, 2024 18:30:46.697710991 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:30:46.697710991 CEST	49756	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:30:46.697752953 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:46.697772026 CEST	443	49756	20.109.210.53	192.168.2.5
Oct 23, 2024 18:30:46.832537889 CEST	443	49793	23.1.237.91	192.168.2.5
Oct 23, 2024 18:30:46.832640886 CEST	49793	443	192.168.2.5	23.1.237.91
Oct 23, 2024 18:30:46.843225956 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.843771935 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.843797922 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.845124006 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.845129967 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.845366955 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.845609903 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.845628023 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.845916033 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.845920086 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.868210077 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.868442059 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.868475914 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.868731976 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.868757963 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.874655008 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.875207901 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.875221968 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.876070976 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.876074076 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.879357100 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.880050898 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.880065918 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.880759954 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.880764961 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.981513977 CEST	443	49716	216.58.206.68	192.168.2.5
Oct 23, 2024 18:30:46.981643915 CEST	443	49716	216.58.206.68	192.168.2.5
Oct 23, 2024 18:30:46.981698036 CEST	49716	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:30:46.989140034 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.989168882 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.989228010 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.989255905 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.989303112 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.989460945 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.989511967 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.989552975 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:46.990216017 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.990557909 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:46.990611076 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.000885963 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.001127005 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.001171112 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.005980968 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.006011963 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.006063938 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.006092072 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.006244898 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.006304026 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.013056040 CEST	49716	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:30:47.013067961 CEST	443	49716	216.58.206.68	192.168.2.5
Oct 23, 2024 18:30:47.016519070 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.016556025 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.016585112 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.016599894 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.018276930 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.018287897 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.018321037 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.018331051 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.019104004 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.019120932 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.019162893 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.019170046 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.020526886 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.020534992 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.020570040 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.020575047 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.027976990 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.028006077 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.028065920 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.028074980 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.028115034 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.029879093 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.029884100 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.029902935 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.030065060 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.030102015 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.030143023 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.033097029 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.033114910 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.033175945 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.035309076 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.035326004 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.035387993 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.035479069 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.035489082 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.035521984 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.035533905 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.035599947 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.035631895 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.035676003 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.035794020 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.035810947 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.036741018 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.036767006 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.036829948 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.037048101 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.037065983 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.037782907 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.037792921 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.037856102 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.037951946 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.037962914 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.764075041 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.767368078 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.783045053 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.829747915 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.873831034 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.907501936 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.907562971 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.908693075 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.908710003 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.909003019 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.909015894 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.913007021 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.913012981 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.919161081 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.919246912 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.919995070 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.920011997 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.920728922 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.920766115 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:47.921230078 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:47.921241045 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.037838936 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.038002968 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.038078070 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.038700104 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.038722038 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.038734913 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.038742065 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.042319059 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.042346954 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.042530060 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.042681932 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.042699099 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.044979095 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.045037985 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.045104980 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.045238018 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.045259953 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.045277119 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.045284986 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.047821999 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.047846079 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.047930002 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.048072100 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.048082113 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.048912048 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.049014091 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.049065113 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.049313068 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.049320936 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.049333096 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.049336910 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.051975965 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.051990032 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.052056074 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.052216053 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.052232981 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.092616081 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.092909098 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.092978001 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.094006062 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.094016075 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.094026089 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.094029903 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.098295927 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.098315954 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.098592997 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.100076914 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.100090981 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.775118113 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.779632092 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.779678106 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.779711008 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.781744957 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.781955004 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.781961918 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.782439947 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.782457113 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.783157110 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.783162117 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.785073996 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.785096884 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.785820961 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.785828114 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.843259096 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.845153093 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.845170021 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.852979898 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.852984905 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.906897068 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.907167912 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.907231092 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.907269001 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.907289982 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.907310963 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.907331944 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.910556078 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.910650969 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.910742044 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.910962105 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.910999060 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.913909912 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.914213896 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.914278984 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.914652109 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.914952993 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.915009975 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.915292978 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.915307999 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.915334940 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.915343046 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.915501118 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.915517092 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.915530920 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.915537119 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.918133974 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.918207884 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.918302059 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.918325901 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.918364048 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.918404102 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.918425083 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.918452024 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.918612957 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.918626070 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.993031025 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.993098021 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.993139982 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.993287086 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.993295908 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.993305922 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.993309975 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.996130943 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.996170998 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:48.996239901 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.996433973 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:48.996459961 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.667135000 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.668095112 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.668179989 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.668647051 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.668661118 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.668749094 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.669084072 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.669128895 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.669312954 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.669930935 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.669941902 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.670211077 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.670234919 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.674978971 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.674984932 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.736953020 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.737433910 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.737466097 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.739605904 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.739618063 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.798815012 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.798989058 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.799165964 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.799436092 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.799479008 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.799514055 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.799530029 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.801538944 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.801681995 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.802191973 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.802905083 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.802943945 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.802959919 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.802959919 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.802989960 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.803016901 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.803123951 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.804295063 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.804367065 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.805219889 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.805242062 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.805402040 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.805691004 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.805708885 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.805820942 CEST	49817	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.805825949 CEST	443	49817	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.808000088 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.808068991 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.808473110 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.808557987 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.808607101 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.808769941 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.808769941 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.808854103 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.808898926 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.808929920 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.870369911 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.870520115 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.870677948 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.871056080 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.871073008 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.871109962 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.871123075 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.874214888 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.874257088 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:49.874481916 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.874481916 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:49.874522924 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.537303925 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.547609091 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.547627926 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.586716890 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.596852064 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.596908092 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.597541094 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.597554922 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.597951889 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.597987890 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.598426104 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.598433971 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.598872900 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.598931074 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.599473000 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.599487066 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.613516092 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.624037981 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.624120951 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.624471903 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.624486923 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.723388910 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.723546982 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.723608017 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.723920107 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.724117994 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.724159002 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.726692915 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.727029085 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.727097034 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.737363100 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.737363100 CEST	49820	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.737431049 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.737466097 CEST	443	49820	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.739192963 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.739214897 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.739228010 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.739233971 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.743809938 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.743859053 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.743887901 CEST	49821	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.743904114 CEST	443	49821	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.750312090 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.750354052 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.750430107 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.751535892 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.751624107 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.751781940 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.751853943 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.751883984 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.752155066 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.752377987 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.752463102 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.752924919 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.752962112 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.753036976 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.753036976 CEST	49822	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.753053904 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.753074884 CEST	443	49822	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.753082991 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.753277063 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.753292084 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.755151987 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.755191088 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.756494999 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.756525040 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:50.756644964 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.756838083 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:50.756860971 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.492670059 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.493674040 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.493736029 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.494293928 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.494308949 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.496196032 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.496565104 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.496594906 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.497008085 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.497014046 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.526772022 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.547039986 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.547070980 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.547955990 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.548007965 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.561877012 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.562266111 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.562350035 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.562756062 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.562769890 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.622965097 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.623908043 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.623969078 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.624023914 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.624023914 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.624058008 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.624087095 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.627330065 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.627353907 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.627454996 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.627621889 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.627626896 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.659429073 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.659673929 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.659727097 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.659847021 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.659868002 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.659881115 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.659888029 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.662463903 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.662554979 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.662630081 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.662802935 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.662841082 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.678284883 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.678751945 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.678848982 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.680422068 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.680464983 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.680499077 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.680514097 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.684205055 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.684216976 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.684463024 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.684643984 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.684653044 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.691591024 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.691744089 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.691831112 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.691895962 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.691895962 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.691926003 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.691951990 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.693779945 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.693864107 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:51.693967104 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.694067955 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:51.694088936 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.363023043 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.363831997 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.363866091 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.364475012 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.364480972 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.399679899 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.403379917 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.403475046 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.404005051 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.404017925 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.423038006 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.423655033 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.423681974 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.424515963 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.424520969 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.446540117 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.446916103 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.446933031 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.447432995 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.447438955 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.492491007 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.492700100 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.492837906 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.493036985 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.493045092 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.493056059 CEST	49828	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.493060112 CEST	443	49828	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.496453047 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.496493101 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.496889114 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.497107983 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.497127056 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.546205997 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.546452045 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.546521902 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.546741009 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.546760082 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.546770096 CEST	49829	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.546775103 CEST	443	49829	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.550257921 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.550307989 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.550525904 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.551016092 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.551035881 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.582699060 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.582873106 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.582993984 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.583204985 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.583214998 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.583224058 CEST	49831	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.583228111 CEST	443	49831	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.592583895 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.592603922 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.592691898 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.592875957 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.592884064 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.611264944 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.611475945 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.611702919 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.623521090 CEST	49830	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.623541117 CEST	443	49830	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.627376080 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.627415895 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:52.627489090 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.627865076 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:52.627883911 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.248430014 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.250437021 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.250514984 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.250957966 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.250976086 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.290138006 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.290664911 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.290685892 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.291212082 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.291218042 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.356468916 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.357723951 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.357772112 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.358297110 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.358308077 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.366493940 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.367263079 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.367285967 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.367902040 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.367907047 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.380646944 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.381171942 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.381254911 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.381308079 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.381308079 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.381341934 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.381366968 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.386224985 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.386308908 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.386430025 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.386591911 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.386615038 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.420792103 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.420994997 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.421273947 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.421314001 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.421329021 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.421353102 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.421359062 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.424035072 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.424117088 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.424211979 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.424360037 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.424397945 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.487252951 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.487431049 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.487507105 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.487550020 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.487550020 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.487571955 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.487593889 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.490170956 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.490252018 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.490336895 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.490468025 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.490495920 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.496505022 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.496639967 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.496694088 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.496845007 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.496845007 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.496861935 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.496869087 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.499145031 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.499227047 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:53.499310017 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.499468088 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:53.499504089 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.122533083 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.123188019 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.123265028 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.123704910 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.123724937 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.157253027 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.158010006 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.158046961 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.158535957 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.158543110 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.241425991 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.245220900 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.245297909 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.248404980 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.248487949 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.248502016 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.248838902 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.248882055 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.249562025 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.249569893 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.250947952 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.251410007 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.251744032 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.251744032 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.252496004 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.252523899 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.255009890 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.255038023 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.255170107 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.255301952 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.255317926 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.287669897 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.288021088 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.288568974 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.288625002 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.288625956 CEST	49837	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.288640022 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.288650990 CEST	443	49837	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.291681051 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.291763067 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.291999102 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.291999102 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.292082071 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.378310919 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.378463030 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.378613949 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.378809929 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.378809929 CEST	49838	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.378853083 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.378887892 CEST	443	49838	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.383342028 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.383382082 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.383661032 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.383742094 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.383867979 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.383886099 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.383914948 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.384059906 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.384284973 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.384284973 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.384299040 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.384311914 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.387111902 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.387155056 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:54.387418032 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.387526989 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:54.387545109 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.002561092 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.028728008 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.053663015 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.077852011 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.125369072 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.138609886 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.138618946 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.139163017 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.139573097 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.139578104 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.141506910 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.141586065 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.145490885 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.145504951 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.145757914 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.145766020 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.166765928 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.172749043 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.172775984 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.178261995 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.178313017 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.197261095 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.197314024 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.268290043 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.268450022 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.268536091 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.268742085 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.268758059 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.268774033 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.268779993 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.272965908 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.273109913 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.273180962 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.273763895 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.273848057 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.273941040 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.274198055 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.274243116 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.274272919 CEST	49845	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.274288893 CEST	443	49845	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.275373936 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.275409937 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.276900053 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.276957035 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.277034998 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.277149916 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.277168989 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.299936056 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.300009966 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.300057888 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.300241947 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.300259113 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.300273895 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.300281048 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.302958965 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.303002119 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.303064108 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.303236008 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.303247929 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.324728012 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.325211048 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.325278997 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.325309038 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.325319052 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.325331926 CEST	49844	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.325337887 CEST	443	49844	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.328167915 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.328257084 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:55.328339100 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.328470945 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:55.328495979 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.019016981 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.019685030 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.019720078 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.020207882 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.020217896 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.024995089 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.025441885 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.025460958 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.025995016 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.026000023 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.026632071 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.027059078 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.027100086 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.027452946 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.027460098 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.066622019 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.067130089 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.067169905 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.067487001 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.067495108 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.149502993 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.149647951 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.149904966 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.149904966 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.149986029 CEST	49847	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.150022030 CEST	443	49847	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.153228998 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.153268099 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.153512955 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.153614998 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.153625965 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.159766912 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.159861088 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.164529085 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.165937901 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.165976048 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.166028976 CEST	49846	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.166044950 CEST	443	49846	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.169095993 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.169189930 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.169430971 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.169431925 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.169517040 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.184727907 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.184958935 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.185045958 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.185045958 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.185143948 CEST	49848	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.185164928 CEST	443	49848	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.187436104 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.187465906 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.187657118 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.187657118 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.187684059 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.197356939 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.197611094 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.197698116 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.197698116 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.197803974 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.197812080 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.199851036 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.199867964 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.200131893 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.200131893 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.200155973 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.904078007 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.904973984 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.905054092 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.906068087 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.906083107 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.907272100 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 23, 2024 18:30:56.907345057 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 23, 2024 18:30:56.907536030 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:30:56.928708076 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.932754993 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.932754993 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:56.932782888 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:56.932792902 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:57.972390890 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:57.972538948 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:57.972728014 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:57.981363058 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:57.982918024 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.023480892 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.023480892 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.099986076 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.100977898 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.101037025 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.231324911 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.231324911 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.231357098 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.231374025 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.234275103 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.234287977 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.234297037 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.234302044 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.237621069 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.237704992 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.238776922 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.238791943 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.239386082 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.239414930 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.240112066 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.240123034 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.277009010 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.277018070 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.277283907 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.277865887 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.277874947 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.279628038 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.279664040 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.279722929 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.280028105 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.280045033 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.368514061 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.368551016 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.368664026 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.368726015 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.368762016 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.368799925 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.371905088 CEST	49854	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.371921062 CEST	443	49854	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.372013092 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.372016907 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.372028112 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.372031927 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.378402948 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.378416061 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.378523111 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.380052090 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.380069971 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.380228043 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.380309105 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.380321026 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.380583048 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:58.380599022 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:58.442589045 CEST	49745	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:30:58.442595005 CEST	443	49745	13.107.246.60	192.168.2.5
Oct 23, 2024 18:30:59.015125036 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.015678883 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.015697002 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.016277075 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.016282082 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.031471968 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.031950951 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.031985998 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.032458067 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.032481909 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.136976004 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.137515068 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.137554884 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.138021946 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.138036966 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.139278889 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.139619112 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.139650106 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.140013933 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.140018940 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.142810106 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.145593882 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.145750046 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.145788908 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.145797968 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.145807981 CEST	49856	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.145812035 CEST	443	49856	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.149193048 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.149231911 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.149300098 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.149497986 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.149517059 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.162072897 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.162255049 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.162364960 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.162550926 CEST	49857	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.162580013 CEST	443	49857	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.165849924 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.165863037 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.166058064 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.166243076 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.166273117 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.265907049 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.266050100 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.266134024 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.266314983 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.266314983 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.266361952 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.266391993 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.270217896 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.270252943 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.270317078 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.270466089 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.270484924 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.274523020 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.274946928 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.275012970 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.275048971 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.275054932 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.275064945 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.275068045 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.277585983 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.277668953 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.277770996 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.277960062 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.277997971 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.918446064 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.919188976 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.919266939 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 23, 2024 18:30:59.920093060 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:30:59.920108080 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.003844976 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.005223036 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.005249023 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.006480932 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.006486893 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.009210110 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.009787083 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.009809971 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.010579109 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.010595083 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.047910929 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.048051119 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.048118114 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.048382998 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.048383951 CEST	49862	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.048408985 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.048430920 CEST	443	49862	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.054558039 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.064971924 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.065001965 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.065072060 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.065576077 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.065607071 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.066555977 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.066561937 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.066912889 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.066927910 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.098248005 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:00.098274946 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:00.098344088 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:00.098651886 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:00.098670006 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:00.102308989 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.102334976 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.102406979 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.109152079 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:00.109193087 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:00.109323978 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:00.109751940 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:00.109769106 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:00.110321045 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.110335112 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.112020016 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:00.112030029 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:00.112168074 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:00.113785028 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:00.113801956 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:00.137032986 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.137542963 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.137604952 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.141850948 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.142141104 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.142219067 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.192553997 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.192720890 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.192791939 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.213210106 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.213236094 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.213251114 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.213258982 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.216506004 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.216511965 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.216538906 CEST	49863	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.216543913 CEST	443	49863	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.220742941 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.220743895 CEST	49864	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.220812082 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.220841885 CEST	443	49864	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.389568090 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.389612913 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.389664888 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.389692068 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.389708042 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.389838934 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.390609980 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.390628099 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.390795946 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.390815973 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.391608000 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.391644955 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.391706944 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.391864061 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.391880989 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.796463013 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.796991110 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.797013998 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.797557116 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.797561884 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.842992067 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:00.843336105 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:00.843398094 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:00.843878984 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:00.844234943 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:00.844314098 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:00.878272057 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:00.878551006 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:00.878582954 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:00.879157066 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:00.879539967 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:00.879657030 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:00.880081892 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.880285025 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.880300999 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.880774975 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.881266117 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.881350040 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.884346962 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:00.891045094 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:00.891376972 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:00.891387939 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:00.891865969 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:00.892379999 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:00.892472029 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:00.921910048 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:00.921920061 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.926660061 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.928406954 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.928524017 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.936386108 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:00.950849056 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.950849056 CEST	49869	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.950864077 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.950872898 CEST	443	49869	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.958008051 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.958048105 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:00.958127022 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.958623886 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:00.958640099 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.128817081 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.129319906 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.142757893 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.153116941 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.153198004 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.154115915 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.154131889 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.154855967 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.154892921 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.155384064 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.155392885 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.156604052 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.156625032 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.157054901 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.157063007 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.286667109 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.286895990 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.286988020 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.287014008 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.287029982 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.287039042 CEST	49876	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.287045002 CEST	443	49876	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.288961887 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.289027929 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.289118052 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.289316893 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.289758921 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.289760113 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.289825916 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.289861917 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.289953947 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.290013075 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.290510893 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.290510893 CEST	49877	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.290534019 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.290548086 CEST	443	49877	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.291594982 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.291627884 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.291802883 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.292706013 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.292721033 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.292861938 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.292906046 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.292941093 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.292948008 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.292962074 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.292983055 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.293091059 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.293102026 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.293234110 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.293245077 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.681600094 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.682308912 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.682351112 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.682760954 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.682770014 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.813247919 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.813536882 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.813611984 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.813875914 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.813896894 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.813911915 CEST	49879	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.813919067 CEST	443	49879	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.817540884 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.817574024 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:01.817765951 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.818131924 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:01.818146944 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.031225920 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.034441948 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.036479950 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.086611032 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.086702108 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.086708069 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.117506027 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.117522955 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.126025915 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.126033068 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.238481998 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.238502026 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.252146959 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.252449036 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.252540112 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.266741991 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.266752958 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.279546022 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.279597044 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.287861109 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.287887096 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.297904968 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.297926903 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.297940969 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.297949076 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.303472996 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.303508997 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.303581953 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.303725004 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.303742886 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.393136978 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.393304110 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.393368959 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.393455982 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.393466949 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.393477917 CEST	49880	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.393482924 CEST	443	49880	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.396276951 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.396378040 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.396506071 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.396691084 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.396725893 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.415858030 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.415934086 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.416001081 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.416165113 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.416182995 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.416194916 CEST	49881	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.416201115 CEST	443	49881	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.419467926 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.419502020 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.419564962 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.419967890 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.419986010 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.614598036 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.615216017 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.615233898 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.615757942 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.615766048 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.750751019 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.750832081 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.750890017 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.751123905 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.751138926 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.751157999 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.751163960 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.754475117 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.754558086 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:02.754676104 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.754892111 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:02.754928112 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.053181887 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.053863049 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.053891897 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.054498911 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.054507017 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.130008936 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.142873049 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.142991066 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.143855095 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.143909931 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.161845922 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.165359974 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.165395975 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.165932894 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.165937901 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.186264038 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.186340094 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.186459064 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.186713934 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.186727047 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.186736107 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.186739922 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.190300941 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.190344095 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.190546989 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.190748930 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.190766096 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.270127058 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.271043062 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.271133900 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.271256924 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.271258116 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.271300077 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.271342993 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.274151087 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.274193048 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.274317026 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.274647951 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.274667025 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.293653965 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.293823957 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.293883085 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.293905973 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.293931007 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.293945074 CEST	49886	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.293950081 CEST	443	49886	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.295887947 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.295938015 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.296133041 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.296241045 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.296252012 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.478280067 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.479871988 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.479993105 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.480703115 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.480757952 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.605952024 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.606487989 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.606554031 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.606631994 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.606631994 CEST	49887	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.606673002 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.606710911 CEST	443	49887	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.609549046 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.609644890 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.609756947 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.610027075 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.610111952 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.934941053 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.935517073 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.935625076 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:03.936090946 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:03.936146975 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.026256084 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.027033091 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.027117968 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.027435064 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.027451038 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.034171104 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.034740925 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.034801960 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.035126925 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.035181999 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.064232111 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.064300060 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.064589977 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.064670086 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.064707994 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.064748049 CEST	49888	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.064764023 CEST	443	49888	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.067626953 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.067665100 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.067785025 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.068043947 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.068061113 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.163491964 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.163564920 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.163769007 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.164280891 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.164280891 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.164347887 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.164382935 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.167886972 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.168000937 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.168167114 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.168493986 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.168534040 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.168653965 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.168653965 CEST	49890	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.168685913 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.168699026 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.168728113 CEST	443	49890	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.169766903 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.169790983 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.171164989 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.171214104 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.171278000 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.171525002 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.171535969 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.357323885 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.358258009 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.358345032 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.358969927 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.358992100 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.488289118 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.488346100 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.488506079 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.488894939 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.488894939 CEST	49891	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.488926888 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.488944054 CEST	443	49891	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.496073008 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.496114016 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.496211052 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.496416092 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.496433973 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.809340954 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.813565016 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.813585043 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.816739082 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.816745996 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.893059015 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.893795013 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.893824100 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.894195080 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.894201994 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.906734943 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.907253027 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.907268047 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.907529116 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.907542944 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.944622040 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.944658995 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.944721937 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.944773912 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.944998026 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.944998026 CEST	49892	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.945020914 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.945031881 CEST	443	49892	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.947757959 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.947851896 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:04.948030949 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.948153973 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:04.948174000 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.022866964 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.023035049 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.023211002 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.023211002 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.023211002 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.025522947 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.025563955 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.025759935 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.025815010 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.025830030 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.044260979 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.044436932 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.044502974 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.044641972 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.044641972 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.044662952 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.044672966 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.047231913 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.047280073 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.047568083 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.047719955 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.047734022 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.248863935 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.249516964 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.249548912 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.249963999 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.249990940 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.334925890 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.334956884 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.382488012 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.382539034 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.382653952 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.382680893 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.382731915 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.383002996 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.383002996 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.383035898 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.383053064 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.386284113 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.386327028 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.386401892 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.386584044 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.386601925 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.596534014 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:05.596695900 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:05.596765041 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:05.599941969 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:05.600033045 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:05.600138903 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:05.610146999 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.610323906 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.610402107 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.629287004 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:05.629482985 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:05.629532099 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:05.683722973 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.684330940 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.684376001 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.684915066 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.684927940 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.770117044 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.770689964 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.770726919 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.771194935 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.771203041 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.794770956 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.795172930 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.795208931 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.795603037 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.795619965 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.814588070 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.814651012 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.814722061 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.814745903 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.814796925 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.814800024 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.814867973 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.814867973 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.814920902 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.814949989 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.817850113 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.817883015 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.818125963 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.818274975 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.818289995 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.901510954 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.901566982 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.901679039 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.901712894 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.901736021 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.901973009 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.905675888 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.905675888 CEST	49897	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.905709028 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.905728102 CEST	443	49897	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.908675909 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.908760071 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.908911943 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.909060955 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.909080982 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.928447008 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.928628922 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.928708076 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.928709030 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.928781033 CEST	49898	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.928814888 CEST	443	49898	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.930732012 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.930757046 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.930805922 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.930929899 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:05.930938005 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:05.979551077 CEST	443	49793	23.1.237.91	192.168.2.5
Oct 23, 2024 18:31:05.979744911 CEST	49793	443	192.168.2.5	23.1.237.91
Oct 23, 2024 18:31:06.134063005 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.134663105 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.134695053 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.135118008 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.135127068 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.264827013 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.265005112 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.265146017 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.265216112 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.265235901 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.265269041 CEST	49899	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.265275955 CEST	443	49899	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.268621922 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.268707037 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.268816948 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.269110918 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.269193888 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.416486979 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:06.416568041 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:06.416646957 CEST	49872	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:06.416666031 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.416666031 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:06.416696072 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.416704893 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:06.416711092 CEST	443	49872	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:06.553566933 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.555432081 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.555449009 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.556184053 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.556190968 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.643502951 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.644135952 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.644174099 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.644690037 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.644702911 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.664810896 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.665194988 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.665215969 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.665592909 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.665605068 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.690654993 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.690826893 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.690892935 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.690990925 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.691004038 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.691015959 CEST	49900	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.691023111 CEST	443	49900	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.694010973 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.694046021 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.694122076 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.694263935 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.694277048 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.772264004 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.772430897 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.772521973 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.773314953 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.773360014 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.773392916 CEST	49901	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.773408890 CEST	443	49901	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.777023077 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.777127981 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.777230978 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.777409077 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.777436018 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.794828892 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.795589924 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.795700073 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.795779943 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.795790911 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.795829058 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.795834064 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.798305035 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.798326015 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:06.798396111 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.798546076 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:06.798562050 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.126183033 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.126840115 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.126899958 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.127368927 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.127382994 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.257750034 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.257844925 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.258059025 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.258400917 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.258440971 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.262387037 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.262474060 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.262638092 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.266704082 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.266741037 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.430098057 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.430691004 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.430721998 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.431257010 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.431263924 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.523839951 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.524574041 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.524625063 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.524955034 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.524965048 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.535664082 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.536195040 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.536236048 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.536585093 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.536611080 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.566526890 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.566710949 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.566900969 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.566901922 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.566940069 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.566957951 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.571404934 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.571496010 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.571871042 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.571980953 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.572011948 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.622569084 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.628036976 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.628088951 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.628216982 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.628499985 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.628518105 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.655173063 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.655383110 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.655452967 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.655498028 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.655498981 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.655525923 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.655539036 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.658229113 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.658313990 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.658425093 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.658678055 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.658715010 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.687671900 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.687833071 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.687896013 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.687953949 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.687971115 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.687998056 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.688004017 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.690035105 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.690057993 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:07.690164089 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.690352917 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:07.690361977 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.022231102 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.023595095 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.023641109 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.024840117 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.024847984 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.154845953 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.155096054 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.155160904 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.155217886 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.155241966 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.155257940 CEST	49907	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.155266047 CEST	443	49907	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.160625935 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.160712957 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.160835028 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.161175966 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.161256075 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.339675903 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.340322971 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.340404034 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.341017962 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.341073036 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.366750002 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.366832972 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.371049881 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.371061087 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.371398926 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.372431993 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.415357113 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.458180904 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.458311081 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.460068941 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.460078955 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.460401058 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.461214066 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.471580982 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.471654892 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.471733093 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.471750021 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.471827984 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.472110987 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.472152948 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.472183943 CEST	49908	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.472199917 CEST	443	49908	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.474436998 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.474558115 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.475632906 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.475672960 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.475773096 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.476394892 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.476412058 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.476716042 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.476752043 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.476969957 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.477895975 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.499886036 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.500355959 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.500452042 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.500492096 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.500492096 CEST	49909	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.500519991 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.500531912 CEST	443	49909	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.503179073 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.503212929 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.503350019 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.503423929 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.503633022 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.503640890 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.519404888 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.587694883 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.587867022 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.587949991 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.590698004 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.590698004 CEST	49911	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.590713978 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.590723038 CEST	443	49911	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.595310926 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.595356941 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.595421076 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.595858097 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.595875025 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.602780104 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.602817059 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.602869034 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.603025913 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.603027105 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.604340076 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.604340076 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.604408026 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.604444027 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.610367060 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.610405922 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.610508919 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.610781908 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.610791922 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.698481083 CEST	443	49723	108.138.7.18	192.168.2.5
Oct 23, 2024 18:31:08.698648930 CEST	443	49723	108.138.7.18	192.168.2.5
Oct 23, 2024 18:31:08.698842049 CEST	49723	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:31:08.909970045 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.910060883 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.911489964 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.911501884 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.912568092 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:08.914370060 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:08.955403090 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.042841911 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.043631077 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.044245958 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.090015888 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.090015888 CEST	49913	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.090049028 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.090066910 CEST	443	49913	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.177509069 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.177572012 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.177963972 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.179339886 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.179362059 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.221540928 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.250993967 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.279215097 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.305192947 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.317996025 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.318048954 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.324086905 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.324141026 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.340559959 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.379405022 CEST	49723	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:31:09.379426956 CEST	443	49723	108.138.7.18	192.168.2.5
Oct 23, 2024 18:31:09.386856079 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.388102055 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.430768013 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.446033955 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.446060896 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.446451902 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.446463108 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.447808981 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.447819948 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.448276043 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.448282003 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.448833942 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.448841095 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.449222088 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.449227095 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.452946901 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.453108072 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.453645945 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.453645945 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.453645945 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.467437983 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.467536926 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.467616081 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.467813969 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.467834949 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.572782993 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.572819948 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.572877884 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.572894096 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.572911024 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.572969913 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.573337078 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.573337078 CEST	49916	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.573369026 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.573386908 CEST	443	49916	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.576514959 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.576675892 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.576785088 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.576826096 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.576838970 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.576838970 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.576838970 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.576894045 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.577100039 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.577117920 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.577976942 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.578166962 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.578336954 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.578336954 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.578336954 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.579211950 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.579309940 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.579410076 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.579587936 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.579613924 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.580292940 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.580379009 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.580483913 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.580615044 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.580660105 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.758471966 CEST	49915	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.758502007 CEST	443	49915	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.882213116 CEST	49917	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.882246971 CEST	443	49917	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.882246971 CEST	49918	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.882277012 CEST	443	49918	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.926742077 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.927629948 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.927645922 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:09.929745913 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:09.929753065 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.058783054 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.058981895 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.059134960 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.060137987 CEST	49919	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.060158014 CEST	443	49919	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.064790010 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.064835072 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.064954042 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.073673010 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.073692083 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.201873064 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.203553915 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.203591108 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.205801964 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.205809116 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.322256088 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.324201107 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.324245930 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.325444937 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.325475931 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.328356028 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.328811884 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.328830004 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.330070972 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.330076933 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.332992077 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.333031893 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.333084106 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.333086967 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.333131075 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.333528042 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.333550930 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.333564043 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.333570004 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.342550993 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.342638016 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.342874050 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.343458891 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.343507051 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.451977968 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.452055931 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.452114105 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.452136040 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.452166080 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.452222109 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.454082966 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.454098940 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.454109907 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.454114914 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.465163946 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.465318918 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.465379000 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.469717979 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.469738960 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.469757080 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.469763994 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.479357004 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.479449034 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.479537010 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.481198072 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.481218100 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.483721018 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.483839035 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.483923912 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.484529972 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.484612942 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.807694912 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.808855057 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.808876991 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.810142994 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.810148001 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.937211037 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.937458992 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.937517881 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.937963009 CEST	49925	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.937988997 CEST	443	49925	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.946695089 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.946780920 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:10.946886063 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.947624922 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:10.947707891 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.081528902 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.082242966 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.082331896 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.082715034 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.082731009 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.214232922 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.214404106 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.214802027 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.214802980 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.214802980 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.218209028 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.218295097 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.218614101 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.218724012 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.218754053 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.223685026 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.224567890 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.224651098 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.224986076 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.225040913 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.230228901 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.231098890 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.231100082 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.231126070 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.231136084 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.354038954 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.354202032 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.354589939 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.354589939 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.354589939 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.358143091 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.358184099 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.358553886 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.358553886 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.358617067 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.362468004 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.362545013 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.362654924 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.362690926 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.362809896 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.362809896 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.362809896 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.365051985 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.365092993 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.365267992 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.365345955 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.365351915 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.522649050 CEST	49926	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.522682905 CEST	443	49926	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.662198067 CEST	49928	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.662261009 CEST	443	49928	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.664413929 CEST	49927	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.664442062 CEST	443	49927	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.684072971 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.732024908 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.756171942 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.756227016 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.761780977 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.761840105 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.890734911 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.890938044 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:11.893743038 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:11.977765083 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.023782015 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.033368111 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.033368111 CEST	49930	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.033436060 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.033472061 CEST	443	49930	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.104867935 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.104923010 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.160864115 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.175782919 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.181648016 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:12.181735992 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:12.181843042 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:12.185611963 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:12.185657978 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:12.185718060 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:12.188283920 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.188368082 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.188467026 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.194881916 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:12.194928885 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:12.194974899 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:12.199022055 CEST	49938	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:31:12.199076891 CEST	443	49938	108.138.7.18	192.168.2.5
Oct 23, 2024 18:31:12.199136972 CEST	49938	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:31:12.204186916 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.204269886 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.212244987 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.215374947 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.219801903 CEST	49938	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:31:12.219830990 CEST	443	49938	108.138.7.18	192.168.2.5
Oct 23, 2024 18:31:12.224001884 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:12.224016905 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:12.228349924 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.228380919 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.229439974 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:12.229471922 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:12.230154991 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:12.230240107 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:12.282932043 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.282943964 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.284383059 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.284392118 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.332906961 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.333277941 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.333338976 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.337635040 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.337635040 CEST	49931	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.337703943 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.337738037 CEST	443	49931	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.372894049 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.372927904 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.374164104 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.374171019 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.387236118 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.387320995 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.387404919 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.387731075 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.387792110 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.393704891 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.393747091 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.393805027 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.395986080 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.395998001 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.411524057 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.411675930 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.411742926 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.411767006 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.411782026 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.411802053 CEST	49933	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.411808014 CEST	443	49933	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.418997049 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.419037104 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.419117928 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.419392109 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.419405937 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.504936934 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.505012989 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.505084991 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.505105019 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.505146027 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.505198956 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.710346937 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.710372925 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.710392952 CEST	49932	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.710401058 CEST	443	49932	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.914877892 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.914920092 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.914983034 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.915429115 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.915445089 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.958590984 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:12.958957911 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:12.958973885 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:12.959458113 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:12.959923029 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:12.959990978 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:12.967389107 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.967658997 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.967689991 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.968166113 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.968669891 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:12.968770027 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:12.978550911 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:12.978916883 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:12.978949070 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:12.980176926 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:12.980585098 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:12.980814934 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:12.982400894 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:12.982599974 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:12.982611895 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:12.984127045 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:12.984450102 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:12.984637022 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:13.008790970 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:13.009032965 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.022365093 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:13.028841972 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:13.069458961 CEST	443	49938	108.138.7.18	192.168.2.5
Oct 23, 2024 18:31:13.069756031 CEST	49938	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:31:13.069817066 CEST	443	49938	108.138.7.18	192.168.2.5
Oct 23, 2024 18:31:13.071266890 CEST	443	49938	108.138.7.18	192.168.2.5
Oct 23, 2024 18:31:13.071578026 CEST	49938	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:31:13.071784019 CEST	443	49938	108.138.7.18	192.168.2.5
Oct 23, 2024 18:31:13.123624086 CEST	49938	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:31:13.146735907 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.147437096 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.147461891 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.148288012 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.148303032 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.161525011 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.162506104 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.162581921 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.163738012 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.163755894 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.176495075 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.176883936 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.176908016 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.177334070 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.177339077 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.279848099 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.280042887 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.280188084 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.280328035 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.280328035 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.280349016 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.280359983 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.283746958 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.283776999 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.283850908 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.284430981 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.284444094 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.293930054 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.294172049 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.294261932 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.294348001 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.294348001 CEST	49939	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.294392109 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.294444084 CEST	443	49939	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.297430992 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.297518969 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.297667980 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.297840118 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.297861099 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.309236050 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.309336901 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.309437037 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.309438944 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.309500933 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.309647083 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.309653997 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.309691906 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.309696913 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.312717915 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.312748909 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.312828064 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.313026905 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.313039064 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.654489994 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.655595064 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.655618906 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.656256914 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.656271935 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.785466909 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.785693884 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.785826921 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.787010908 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.787035942 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.787074089 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.787084103 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.800184011 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.800237894 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:13.800328970 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.800513029 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:13.800534010 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.019519091 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.020255089 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.020273924 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.021115065 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.021120071 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.049695015 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.050920963 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.051013947 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.051827908 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.051845074 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.063764095 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.064716101 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.064737082 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.065830946 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.065836906 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.151540041 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.151791096 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.155657053 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.182163000 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.182544947 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.182651043 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.200197935 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.200270891 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.200371981 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.200406075 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.200449944 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.554441929 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.597668886 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.676661968 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.676724911 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.677557945 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.677573919 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.677930117 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.677957058 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.677977085 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.677983046 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.683451891 CEST	49944	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.683490038 CEST	443	49944	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.728816986 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.728835106 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.728849888 CEST	49945	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.728856087 CEST	443	49945	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.746228933 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.746243954 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.746470928 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.749358892 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.749372005 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.753083944 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.753144026 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.753362894 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.753473043 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.753509045 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.755587101 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.755597115 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.755790949 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.772238970 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.772253036 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.809190989 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.809355021 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.809504986 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.835135937 CEST	49946	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.835158110 CEST	443	49946	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.841901064 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.841984987 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:14.842174053 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.842622995 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:14.842657089 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.497251034 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.498363018 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.498447895 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.500370026 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.500385046 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.502446890 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.503300905 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.503333092 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.504267931 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.504276037 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.509105921 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.509535074 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.509556055 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.509955883 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.509963036 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.598321915 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.599462032 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.599545956 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.600107908 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.600123882 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.629698992 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.629899979 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.630081892 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.630081892 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.630081892 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.634102106 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.634135008 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.634216070 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.634375095 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.634392977 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.637037039 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.637118101 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.637181044 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.637195110 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.637224913 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.637341022 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.637404919 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.637417078 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.637432098 CEST	49947	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.637439013 CEST	443	49947	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.639535904 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.639899015 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.639955044 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.639951944 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.639967918 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.640018940 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.640034914 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.640047073 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.640074015 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.640088081 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.640088081 CEST	49950	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.640098095 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.640114069 CEST	443	49950	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.640117884 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.640753031 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.640788078 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.642239094 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.642260075 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.642318010 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.642468929 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.642483950 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.728256941 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.728413105 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.728492975 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.728673935 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.728719950 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.728749037 CEST	49951	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.728765011 CEST	443	49951	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.732180119 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.732264042 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.732355118 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.732547998 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.732572079 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:15.945216894 CEST	49949	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:15.945280075 CEST	443	49949	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.381387949 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.381807089 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.382524014 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.382601976 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.382698059 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.382711887 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.383255005 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.383343935 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.383625984 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.383640051 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.387161970 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.387828112 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.387856960 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.387942076 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.387952089 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.499993086 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.501137972 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.501137972 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.501224041 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.501286030 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.511425018 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.511499882 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.511629105 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.511792898 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.511887074 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.511888027 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.511888027 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.511912107 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.512135983 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.512135983 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.512135983 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.515254974 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.515286922 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.515288115 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.515333891 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.515419006 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.515557051 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.515557051 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.515557051 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.515567064 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.515599966 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.520703077 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.520958900 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.521045923 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.521061897 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.521148920 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.521197081 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.521197081 CEST	49952	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.521238089 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.521265984 CEST	443	49952	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.524364948 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.524398088 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.524600983 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.524600983 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.524624109 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.632383108 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.632558107 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.638829947 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.642597914 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.642668009 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.642709017 CEST	49955	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.642725945 CEST	443	49955	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.649130106 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.649149895 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.649645090 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.649727106 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.649734974 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.821041107 CEST	49953	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.821055889 CEST	49954	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:16.821104050 CEST	443	49953	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:16.821119070 CEST	443	49954	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.256877899 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.259047031 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.259066105 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.259654999 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.259670019 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.275746107 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.276505947 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.276545048 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.277128935 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.277136087 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.277228117 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.277853966 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.277873993 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.278451920 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.278456926 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.384974003 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.385982037 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.386009932 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.386548996 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.386557102 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.386882067 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.387039900 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.387166977 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.387166977 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.387278080 CEST	49956	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.387291908 CEST	443	49956	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.391298056 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.391345978 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.391561985 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.391562939 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.391594887 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.407830954 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.407977104 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.408032894 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.408068895 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.408090115 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.408102989 CEST	49957	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.408109903 CEST	443	49957	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.411911011 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.411986113 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.412089109 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.412091970 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.412103891 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.412134886 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.412195921 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.412251949 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.412328005 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.412337065 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.413300037 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.413321018 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.413414955 CEST	49958	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.413423061 CEST	443	49958	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.416249990 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.416287899 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.416383028 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.416496038 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.416512012 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.526747942 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.526905060 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.526972055 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.527230978 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.527250051 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.527262926 CEST	49959	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.527270079 CEST	443	49959	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.532203913 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.532250881 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.532319069 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.532910109 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.532936096 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.715472937 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:17.715568066 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:17.715611935 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:17.718132019 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.718305111 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:17.718370914 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:17.722032070 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:17.722201109 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:17.722263098 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:17.722660065 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:17.723035097 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:17.723099947 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:18.144205093 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.144833088 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.144870996 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.145379066 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.145385981 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.146195889 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.146439075 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.146656990 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.146673918 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.147108078 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.147113085 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.147131920 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.147203922 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.147452116 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.147468090 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.276294947 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.276396036 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.276504040 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.276531935 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.276726007 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.276745081 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.276758909 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.276772976 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.277157068 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.277256012 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.277442932 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.277513981 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.277570963 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.277580976 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.277633905 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.277740002 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.279109955 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.279130936 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.279160023 CEST	49962	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.279166937 CEST	443	49962	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.280865908 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.280872107 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.280886889 CEST	49961	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.280890942 CEST	443	49961	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.283363104 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.283447981 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.283759117 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.284462929 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.284511089 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.284641981 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.284797907 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.284799099 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.284884930 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.284897089 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.284919977 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.284960032 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.285038948 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.285162926 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.285178900 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.299398899 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.299906015 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.299931049 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.300302029 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.300308943 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.416105032 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:18.416131973 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:18.416287899 CEST	49935	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:18.416290998 CEST	49936	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.416317940 CEST	443	49935	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:18.416359901 CEST	443	49936	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.416397095 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:18.416429996 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:18.430773973 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.430918932 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.431087017 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.431087971 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.431140900 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.431160927 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.434191942 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.434223890 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.434355021 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.434524059 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.434539080 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.693422079 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.693712950 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.693866014 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.693938017 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.694705963 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.694829941 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.694938898 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.695004940 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.695075035 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.698216915 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.698273897 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.824753046 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.826184034 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.826282024 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.826323032 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.826491117 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:18.826527119 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:18.955367088 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.001000881 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.001063108 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.021615982 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.025418043 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.025501013 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.025980949 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.025994062 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.028400898 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.071341991 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.154036999 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.154340982 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.154450893 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.154642105 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.154750109 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.154833078 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.162591934 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.162592888 CEST	49965	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.162637949 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.162667990 CEST	443	49965	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.182254076 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.197973967 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.206336021 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.206355095 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.207262039 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.207268000 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.220472097 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.220525980 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.233884096 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.233937979 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.334758997 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.334908009 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.334980011 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.347624063 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.348428011 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.348438978 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.348452091 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.348459005 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.363197088 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.363281965 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.364190102 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.364732981 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.366977930 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.367010117 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.489506960 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.493490934 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.496690035 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.536583900 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.536607027 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.541871071 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.543306112 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.543338060 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.569534063 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.570532084 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.570557117 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.570943117 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.570950031 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.619021893 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.622474909 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.663340092 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.667438984 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.690047026 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.690080881 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.692082882 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.700292110 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.700444937 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.700591087 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.700740099 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.700740099 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.700762987 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.700774908 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.702821016 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.702852011 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.748706102 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.751440048 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.795351982 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.816986084 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.820189953 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.820218086 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.822511911 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.824961901 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.833851099 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.836429119 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.879329920 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.881999969 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.885365009 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.885397911 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.946161985 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.949076891 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.949110031 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.952541113 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.954950094 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:19.962454081 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:19.964566946 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.007332087 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.013746023 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.016623974 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.016668081 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.075519085 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.079046965 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.079080105 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.081343889 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.084197044 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.090423107 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.092416048 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.135328054 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.142194033 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.145397902 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.145441055 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.204602957 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.207948923 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.208017111 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.211185932 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.213320017 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.218015909 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.219917059 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.263329029 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.272991896 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.275717974 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.275794029 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.334028959 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.336922884 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.336993933 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.339167118 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.341206074 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.383352995 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.385387897 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.388814926 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.388886929 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.402452946 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.404916048 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.447335005 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.464442968 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.467648983 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.467724085 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.469191074 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.471745968 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.514944077 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.518140078 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.530782938 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.533102036 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.579325914 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.593512058 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.596035957 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.596102953 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.598690033 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.600729942 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.643326044 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.644227982 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.647583008 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.647659063 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.658895969 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.661432028 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.707326889 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.721883059 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.733864069 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.733937979 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.736414909 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.774324894 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.777549028 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.788543940 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.790699959 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.835369110 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.888937950 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.900486946 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.900538921 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.903522015 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.907145977 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.909329891 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.916784048 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:20.918561935 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:20.959371090 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.027944088 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.031397104 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.031455994 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.034384012 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.036895037 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.043550968 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.045808077 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.087352037 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.089680910 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.093133926 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.093185902 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.159231901 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.162578106 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.162631989 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.164627075 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.167083025 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.207406044 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.213242054 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.217580080 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.217617989 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.219218969 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.221807003 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.263334036 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.288479090 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.292366028 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.292449951 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.294128895 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.296489000 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.339328051 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.343851089 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.347183943 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.347229958 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.350236893 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.353661060 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.399326086 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.418323040 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.422655106 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.422703028 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.423471928 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.426482916 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.467360020 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.473278999 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.477313995 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.477354050 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.481913090 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.484543085 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.531321049 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.550442934 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.555727959 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.555771112 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.557995081 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.599333048 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.603816032 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.606210947 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.606249094 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.610555887 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.612740040 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.655355930 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.682230949 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.685470104 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.685508966 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.687455893 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.689848900 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.732945919 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.737723112 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.738203049 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.740485907 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.783325911 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.811842918 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.815208912 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.815279007 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.816426992 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.819200039 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.859327078 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.878573895 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.883399010 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.883435965 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.910902023 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.927488089 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.941396952 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:21.958117008 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:21.999370098 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.000631094 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.003990889 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.004075050 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.012336969 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.015424967 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.053908110 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.064049959 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.088103056 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.092052937 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.129937887 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.134537935 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.141567945 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.144001961 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.191329956 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.193968058 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.197335005 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.197370052 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.217628956 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.240784883 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.263649940 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.266953945 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.271374941 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.276849031 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.323323965 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.324028969 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.326543093 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.326630116 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.367249012 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.372447014 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.372618914 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.393702030 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.396126032 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.441663027 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.447194099 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.452625036 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.455236912 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.498996019 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.501871109 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.525365114 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.542902946 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.573326111 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.576975107 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.621354103 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.624578953 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.627502918 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.629874945 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.669048071 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.671786070 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.703200102 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.705564022 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.751235008 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.754194975 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.795492887 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.798875093 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.830643892 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.881464005 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.881525040 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.885459900 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.885459900 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.885572910 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.925271034 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.929802895 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:22.956909895 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:22.959886074 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.003345966 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.012084007 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.053930044 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.053992033 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.060422897 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.060424089 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.060508966 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.062716961 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.062935114 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.086452007 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.089241028 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.131485939 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.186424017 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.186616898 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.190200090 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.190268040 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.190496922 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.192040920 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.221792936 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.221884012 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.221946001 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.225341082 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.225341082 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.225557089 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.317217112 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.317329884 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.317480087 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.317543983 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.322474003 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.322474003 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.322576046 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.351291895 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.398219109 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.398246050 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.409815073 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.410700083 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.410778046 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.652349949 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.656917095 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.657056093 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.657118082 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.690063000 CEST	49722	443	192.168.2.5	35.186.249.72
Oct 23, 2024 18:31:23.690120935 CEST	443	49722	35.186.249.72	192.168.2.5
Oct 23, 2024 18:31:23.706140995 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.768413067 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.810507059 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.931977034 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.932723045 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.932948112 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.934047937 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.934644938 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:23.934700012 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:23.938888073 CEST	49974	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:31:23.938915014 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:23.939008951 CEST	49974	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:31:23.939349890 CEST	49974	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:31:23.939366102 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:24.059669971 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:24.064681053 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:24.064759970 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:24.064821959 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:24.115824938 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:24.115842104 CEST	443	49924	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:24.164608002 CEST	49924	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:24.722686052 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:24.722726107 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:24.722923994 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:24.725630045 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:24.725668907 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:24.725783110 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:24.726923943 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:24.726936102 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:24.726989031 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:24.730879068 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:24.730971098 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:24.731050014 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:24.738964081 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:24.739031076 CEST	49974	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:31:24.742788076 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:24.742865086 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:24.743205070 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:24.743217945 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:24.743670940 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:24.743683100 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:24.744508982 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:24.744549990 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:24.782706022 CEST	49974	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:31:24.782716990 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:24.783129930 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:24.815644979 CEST	49974	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:31:24.822139978 CEST	49724	443	192.168.2.5	150.171.28.10
Oct 23, 2024 18:31:24.822158098 CEST	443	49724	150.171.28.10	192.168.2.5
Oct 23, 2024 18:31:24.859334946 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:25.080013037 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:25.080049038 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:25.080075026 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:25.080086946 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:25.080101967 CEST	49974	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:31:25.080111027 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:25.080149889 CEST	49974	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:31:25.080171108 CEST	49974	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:31:25.102252960 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:25.102332115 CEST	49974	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:31:25.102332115 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:25.102372885 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:25.102413893 CEST	49974	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:31:25.102472067 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:25.102514982 CEST	49974	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:31:25.102737904 CEST	49974	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:31:25.102746964 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:25.102768898 CEST	49974	443	192.168.2.5	20.109.210.53
Oct 23, 2024 18:31:25.102773905 CEST	443	49974	20.109.210.53	192.168.2.5
Oct 23, 2024 18:31:25.479677916 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:25.479991913 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:25.480001926 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:25.480487108 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:25.480946064 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:25.481025934 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:25.506881952 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:25.507107973 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:25.507141113 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:25.507541895 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:25.507862091 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:25.507936001 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:25.507987976 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:25.508275986 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:25.508306026 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:25.508471012 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:25.508624077 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:25.508632898 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:25.509012938 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:25.509325981 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:25.509382010 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:25.509613037 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:25.509634018 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:25.509701967 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:25.526052952 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:25.554450989 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:25.554464102 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:25.554481030 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:30.234353065 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:30.234433889 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:30.235044956 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:30.249711990 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:30.249855995 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:30.250157118 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:30.251620054 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:30.251687050 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:30.251744986 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:30.254189968 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:30.254275084 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:30.254317045 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:30.416604996 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:30.416636944 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:30.416711092 CEST	49981	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:30.416721106 CEST	443	49981	13.107.246.45	192.168.2.5
Oct 23, 2024 18:31:30.416866064 CEST	49980	443	192.168.2.5	13.107.246.60
Oct 23, 2024 18:31:30.416872025 CEST	443	49980	13.107.246.60	192.168.2.5
Oct 23, 2024 18:31:30.416903973 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 18:31:30.416917086 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 18:31:36.172696114 CEST	49986	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:31:36.172734022 CEST	443	49986	216.58.206.68	192.168.2.5
Oct 23, 2024 18:31:36.172801971 CEST	49986	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:31:36.173913956 CEST	49986	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:31:36.173938990 CEST	443	49986	216.58.206.68	192.168.2.5
Oct 23, 2024 18:31:37.043837070 CEST	443	49986	216.58.206.68	192.168.2.5
Oct 23, 2024 18:31:37.044202089 CEST	49986	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:31:37.044228077 CEST	443	49986	216.58.206.68	192.168.2.5
Oct 23, 2024 18:31:37.045332909 CEST	443	49986	216.58.206.68	192.168.2.5
Oct 23, 2024 18:31:37.045743942 CEST	49986	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:31:37.045936108 CEST	443	49986	216.58.206.68	192.168.2.5
Oct 23, 2024 18:31:37.098905087 CEST	49986	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:31:39.616735935 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 23, 2024 18:31:40.689433098 CEST	49724	443	192.168.2.5	150.171.28.10
Oct 23, 2024 18:31:40.689513922 CEST	443	49724	150.171.28.10	192.168.2.5
Oct 23, 2024 18:31:40.689551115 CEST	49722	443	192.168.2.5	35.186.249.72
Oct 23, 2024 18:31:40.689574957 CEST	49724	443	192.168.2.5	150.171.28.10
Oct 23, 2024 18:31:40.689635038 CEST	443	49722	35.186.249.72	192.168.2.5
Oct 23, 2024 18:31:40.689688921 CEST	49722	443	192.168.2.5	35.186.249.72
Oct 23, 2024 18:31:42.942255020 CEST	443	49938	108.138.7.18	192.168.2.5
Oct 23, 2024 18:31:42.942342997 CEST	443	49938	108.138.7.18	192.168.2.5
Oct 23, 2024 18:31:42.942401886 CEST	49938	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:31:44.421910048 CEST	49938	443	192.168.2.5	108.138.7.18
Oct 23, 2024 18:31:44.421936035 CEST	443	49938	108.138.7.18	192.168.2.5
Oct 23, 2024 18:31:47.032845974 CEST	443	49986	216.58.206.68	192.168.2.5
Oct 23, 2024 18:31:47.033003092 CEST	443	49986	216.58.206.68	192.168.2.5
Oct 23, 2024 18:31:47.033072948 CEST	49986	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:31:48.518544912 CEST	49986	443	192.168.2.5	216.58.206.68
Oct 23, 2024 18:31:48.518557072 CEST	443	49986	216.58.206.68	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 18:30:32.220773935 CEST	53	50715	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:32.227066994 CEST	53	51613	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:33.542690992 CEST	53	62254	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:36.107995033 CEST	57144	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:36.108113050 CEST	55288	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:36.115693092 CEST	53	57144	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:36.117177963 CEST	53	55288	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:37.958736897 CEST	53	61873	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:37.960517883 CEST	52662	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:37.960664034 CEST	57090	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:37.962197065 CEST	62743	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:37.962301016 CEST	62197	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:37.967608929 CEST	53	52984	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:37.968491077 CEST	53	52662	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:37.969816923 CEST	53	57090	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:37.969851971 CEST	53	62743	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:37.975111008 CEST	53	62197	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:37.976052999 CEST	53	57772	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:37.979228973 CEST	57382	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:37.979351997 CEST	61747	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:37.987740993 CEST	63783	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:37.987863064 CEST	61686	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:37.999423027 CEST	53	61383	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:38.010905981 CEST	53	51830	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:38.020920038 CEST	52961	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:38.021322012 CEST	57617	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:38.021805048 CEST	55367	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:38.022795916 CEST	58761	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:38.040074110 CEST	63272	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:38.040209055 CEST	65426	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:38.040678978 CEST	52442	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:38.040862083 CEST	55564	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:38.041484118 CEST	51162	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:38.041618109 CEST	59744	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:38.049302101 CEST	53	65426	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:38.050518990 CEST	53	59744	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:38.050580025 CEST	53532	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:38.050723076 CEST	49280	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:38.058985949 CEST	53	49280	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:38.059248924 CEST	53	53532	1.1.1.1	192.168.2.5
Oct 23, 2024 18:30:38.060547113 CEST	52047	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:38.060673952 CEST	65195	53	192.168.2.5	1.1.1.1
Oct 23, 2024 18:30:50.601887941 CEST	53	51898	1.1.1.1	192.168.2.5
Oct 23, 2024 18:31:00.037117958 CEST	53	49890	1.1.1.1	192.168.2.5
Oct 23, 2024 18:31:00.037200928 CEST	53	58336	1.1.1.1	192.168.2.5
Oct 23, 2024 18:31:00.051999092 CEST	53	60414	1.1.1.1	192.168.2.5
Oct 23, 2024 18:31:09.390963078 CEST	53	54953	1.1.1.1	192.168.2.5
Oct 23, 2024 18:31:12.176155090 CEST	53	65313	1.1.1.1	192.168.2.5
Oct 23, 2024 18:31:12.176172972 CEST	53	56479	1.1.1.1	192.168.2.5
Oct 23, 2024 18:31:12.323841095 CEST	53	57796	1.1.1.1	192.168.2.5
Oct 23, 2024 18:31:24.478790045 CEST	53	61566	1.1.1.1	192.168.2.5
Oct 23, 2024 18:31:24.587064981 CEST	53	61661	1.1.1.1	192.168.2.5
Oct 23, 2024 18:31:24.587125063 CEST	53	61003	1.1.1.1	192.168.2.5
Oct 23, 2024 18:31:24.708636045 CEST	53	52021	1.1.1.1	192.168.2.5
Oct 23, 2024 18:31:31.801434994 CEST	53	56255	1.1.1.1	192.168.2.5
Oct 23, 2024 18:31:31.878434896 CEST	53	51692	1.1.1.1	192.168.2.5
Oct 23, 2024 18:31:45.158822060 CEST	53	61293	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 23, 2024 18:30:38.010971069 CEST	192.168.2.5	1.1.1.1	c23d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 23, 2024 18:30:36.107995033 CEST	192.168.2.5	1.1.1.1	0x391d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:36.108113050 CEST	192.168.2.5	1.1.1.1	0x27e3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 23, 2024 18:30:37.960517883 CEST	192.168.2.5	1.1.1.1	0x3a09	Standard query (0)	d.impactradius-event.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:37.960664034 CEST	192.168.2.5	1.1.1.1	0x5c01	Standard query (0)	d.impactradius-event.com	65	IN (0x0001)	false
Oct 23, 2024 18:30:37.962197065 CEST	192.168.2.5	1.1.1.1	0xd0bb	Standard query (0)	cdnssl.clicktale.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:37.962301016 CEST	192.168.2.5	1.1.1.1	0xc8d2	Standard query (0)	cdnssl.clicktale.net	65	IN (0x0001)	false
Oct 23, 2024 18:30:37.979228973 CEST	192.168.2.5	1.1.1.1	0xa0a7	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:37.979351997 CEST	192.168.2.5	1.1.1.1	0x881a	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Oct 23, 2024 18:30:37.987740993 CEST	192.168.2.5	1.1.1.1	0x59a0	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:37.987863064 CEST	192.168.2.5	1.1.1.1	0xa898	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Oct 23, 2024 18:30:38.020920038 CEST	192.168.2.5	1.1.1.1	0x76a4	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:38.021322012 CEST	192.168.2.5	1.1.1.1	0x499f	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Oct 23, 2024 18:30:38.021805048 CEST	192.168.2.5	1.1.1.1	0xdf77	Standard query (0)	mem.gfx.ms	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:38.022795916 CEST	192.168.2.5	1.1.1.1	0x12c6	Standard query (0)	mem.gfx.ms	65	IN (0x0001)	false
Oct 23, 2024 18:30:38.040074110 CEST	192.168.2.5	1.1.1.1	0xf0f3	Standard query (0)	lptag.liveperson.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:38.040209055 CEST	192.168.2.5	1.1.1.1	0x8466	Standard query (0)	lptag.liveperson.net	65	IN (0x0001)	false
Oct 23, 2024 18:30:38.040678978 CEST	192.168.2.5	1.1.1.1	0xe326	Standard query (0)	lpcdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:38.040862083 CEST	192.168.2.5	1.1.1.1	0xf0b6	Standard query (0)	lpcdn.lpsnmedia.net	65	IN (0x0001)	false
Oct 23, 2024 18:30:38.041484118 CEST	192.168.2.5	1.1.1.1	0xad08	Standard query (0)	accdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:38.041618109 CEST	192.168.2.5	1.1.1.1	0x62c	Standard query (0)	accdn.lpsnmedia.net	65	IN (0x0001)	false
Oct 23, 2024 18:30:38.050580025 CEST	192.168.2.5	1.1.1.1	0xae7f	Standard query (0)	publisher.liveperson.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:38.050723076 CEST	192.168.2.5	1.1.1.1	0xe1af	Standard query (0)	publisher.liveperson.net	65	IN (0x0001)	false
Oct 23, 2024 18:30:38.060547113 CEST	192.168.2.5	1.1.1.1	0xb3ad	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:38.060673952 CEST	192.168.2.5	1.1.1.1	0x6b03	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 23, 2024 18:30:36.115693092 CEST	1.1.1.1	192.168.2.5	0x391d	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:36.117177963 CEST	1.1.1.1	192.168.2.5	0x27e3	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 23, 2024 18:30:37.968491077 CEST	1.1.1.1	192.168.2.5	0x3a09	No error (0)	d.impactradius-event.com		35.186.249.72	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:37.969851971 CEST	1.1.1.1	192.168.2.5	0xd0bb	No error (0)	cdnssl.clicktale.net	d1xbuscas8tetl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:37.969851971 CEST	1.1.1.1	192.168.2.5	0xd0bb	No error (0)	d1xbuscas8tetl.cloudfront.net		108.138.7.18	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:37.969851971 CEST	1.1.1.1	192.168.2.5	0xd0bb	No error (0)	d1xbuscas8tetl.cloudfront.net		108.138.7.43	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:37.969851971 CEST	1.1.1.1	192.168.2.5	0xd0bb	No error (0)	d1xbuscas8tetl.cloudfront.net		108.138.7.67	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:37.969851971 CEST	1.1.1.1	192.168.2.5	0xd0bb	No error (0)	d1xbuscas8tetl.cloudfront.net		108.138.7.85	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:37.975111008 CEST	1.1.1.1	192.168.2.5	0xc8d2	No error (0)	cdnssl.clicktale.net	d1xbuscas8tetl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:37.986100912 CEST	1.1.1.1	192.168.2.5	0x9d96	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:37.986100912 CEST	1.1.1.1	192.168.2.5	0x9d96	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:37.986100912 CEST	1.1.1.1	192.168.2.5	0x9d96	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:37.986867905 CEST	1.1.1.1	192.168.2.5	0x881a	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:37.986867905 CEST	1.1.1.1	192.168.2.5	0x881a	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:37.988260984 CEST	1.1.1.1	192.168.2.5	0xa0a7	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:37.988260984 CEST	1.1.1.1	192.168.2.5	0xa0a7	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:37.995796919 CEST	1.1.1.1	192.168.2.5	0xa898	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:37.999718904 CEST	1.1.1.1	192.168.2.5	0x59a0	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.028795958 CEST	1.1.1.1	192.168.2.5	0x499f	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.028795958 CEST	1.1.1.1	192.168.2.5	0x499f	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.029913902 CEST	1.1.1.1	192.168.2.5	0x76a4	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.029913902 CEST	1.1.1.1	192.168.2.5	0x76a4	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.029913902 CEST	1.1.1.1	192.168.2.5	0x76a4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.029913902 CEST	1.1.1.1	192.168.2.5	0x76a4	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.029913902 CEST	1.1.1.1	192.168.2.5	0x76a4	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:38.029967070 CEST	1.1.1.1	192.168.2.5	0xdf77	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.029967070 CEST	1.1.1.1	192.168.2.5	0xdf77	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.029967070 CEST	1.1.1.1	192.168.2.5	0xdf77	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:38.048712015 CEST	1.1.1.1	192.168.2.5	0x12c6	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.049149036 CEST	1.1.1.1	192.168.2.5	0xad08	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.049268961 CEST	1.1.1.1	192.168.2.5	0xf0f3	No error (0)	lptag.liveperson.net	lptag.liveperson.cotcdb.net.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.049302101 CEST	1.1.1.1	192.168.2.5	0x8466	No error (0)	lptag.liveperson.net	lptag.liveperson.cotcdb.net.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.049393892 CEST	1.1.1.1	192.168.2.5	0xf0b6	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.050518990 CEST	1.1.1.1	192.168.2.5	0x62c	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.059248924 CEST	1.1.1.1	192.168.2.5	0xae7f	No error (0)	publisher.liveperson.net		34.120.154.120	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:38.060801983 CEST	1.1.1.1	192.168.2.5	0xe326	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.069083929 CEST	1.1.1.1	192.168.2.5	0xb3ad	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.069083929 CEST	1.1.1.1	192.168.2.5	0xb3ad	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.069083929 CEST	1.1.1.1	192.168.2.5	0xb3ad	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.069083929 CEST	1.1.1.1	192.168.2.5	0xb3ad	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.069083929 CEST	1.1.1.1	192.168.2.5	0xb3ad	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 23, 2024 18:30:38.069493055 CEST	1.1.1.1	192.168.2.5	0x6b03	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.069493055 CEST	1.1.1.1	192.168.2.5	0x6b03	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.071357965 CEST	1.1.1.1	192.168.2.5	0x3170	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.071444035 CEST	1.1.1.1	192.168.2.5	0x5a3d	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.071444035 CEST	1.1.1.1	192.168.2.5	0x5a3d	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 18:30:38.071444035 CEST	1.1.1.1	192.168.2.5	0x5a3d	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

otelrules.azureedge.net

slscr.update.microsoft.com

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Oct 23, 2024 18:31:18.694705963 CEST	13.107.246.45	443	192.168.2.5	49924	CN=*.azureedge.net, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 19 17:30:52 CEST 2024 Thu Jun 08 02:00:00 CEST 2023 Thu Aug 01 14:00:00 CEST 2013	Sun Sep 14 17:30:52 CEST 2025 Wed Aug 26 01:59:59 CEST 2026 Fri Jan 15 13:00:00 CET 2038	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
					CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jun 08 02:00:00 CEST 2023	Wed Aug 26 01:59:59 CEST 2026
					CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 01 14:00:00 CEST 2013	Fri Jan 15 13:00:00 CET 2038

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49718	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:37 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 16:30:37 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=87335 Date: Wed, 23 Oct 2024 16:30:37 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49719	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:39 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 16:30:40 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=87302 Date: Wed, 23 Oct 2024 16:30:39 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 16:30:40 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:44 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:44 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:44 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 04de7e24-801e-008f-0e20-242c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163044Z-16849878b78z5q7jpbgf6e9mcw00000006h000000000f4vm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:30:44 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 16:30:44 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-23 16:30:44 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-23 16:30:44 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-23 16:30:45 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-23 16:30:45 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-23 16:30:45 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-23 16:30:45 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-23 16:30:45 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-23 16:30:45 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49756	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:45 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yTWkex4NXVntyPx&MD=271To5Sy HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 16:30:45 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: cdbe7c37-e575-449f-bb28-e867ea87998f MS-RequestId: 95217796-3782-4661-807e-d664b7e41ad2 MS-CV: /Tx6UoWfE0+f/M87.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 16:30:45 GMT Connection: close Content-Length: 24490
2024-10-23 16:30:45 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-23 16:30:45 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:46 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:46 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:46 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163046Z-16849878b78rjhv97f3nhawr7s000000069000000000wwzn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:46 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:46 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:46 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:46 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163046Z-16849878b78dkr6tqerbnpg1zc00000006d000000000qmp9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:30:46 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:46 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:46 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:46 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163046Z-16849878b78rjhv97f3nhawr7s00000006b000000000pzz6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:46 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:46 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:46 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:46 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163046Z-16849878b78bkvbz1ry47zvsas00000006hg0000000051u0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:46 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:46 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:46 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 23ba7a24-801e-0015-5af3-24f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163046Z-r197bdfb6b4t7wszdvrfk02ah400000007zg00000000erx9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:47 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:47 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:47 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 13d0e6d2-b01e-0053-47f4-24cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163047Z-15b8d89586fst84k5f3z220tec0000000d200000000093r0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:48 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:47 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:47 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: e5972945-801e-007b-45f3-24e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163047Z-15b8d89586fxdh48qknu9dqk2g00000001pg00000000k0b4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:48 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:47 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:47 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 095283a4-c01e-0066-76f4-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163047Z-r197bdfb6b4kzncf21qcaynxz800000000mg00000000ghnp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:48 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:47 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:47 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: bcb88dd7-c01e-0079-47cd-21e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163047Z-16849878b78c2tmb7nhatnd68s00000006kg000000001d8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:48 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:48 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:48 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:48 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163048Z-16849878b78hz7zj8u0h2zng1400000006p00000000001su x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:48 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:48 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:48 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:48 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 0d728fc6-301e-0000-17e3-21eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163048Z-16849878b787psctgubawhx7k8000000065000000000wpmt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:48 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:48 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:48 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 53592b39-c01e-0082-1ef3-24af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163048Z-15b8d89586f2hk2885zk3a4enc0000000cxg00000000hpf6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:48 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:48 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:48 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:48 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6ca7d158-d01e-0014-15ac-21ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163048Z-16849878b784cpcc2dr9ch74ng00000006dg00000000vsgw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:48 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:49 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:49 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163049Z-16849878b78dghrpt8v731n7r400000006a000000000hs72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:49 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:49 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:49 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163049Z-16849878b78dkr6tqerbnpg1zc00000006k0000000003pt1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:49 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:49 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:49 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 89a40fd7-b01e-00ab-1aad-24dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163049Z-15b8d89586fxdh48qknu9dqk2g00000001mg00000000rauz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:49 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:49 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:49 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:49 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 4cd68789-d01e-0017-448e-21b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163049Z-16849878b78bkvbz1ry47zvsas00000006g000000000avkh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:49 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:50 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:50 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:50 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 968807c2-e01e-0052-0805-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163050Z-16849878b78plcdqu15wsb8864000000069g00000000vq2g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:50 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:50 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:50 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 241b467f-801e-0015-2b13-25f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163050Z-r197bdfb6b46gt25anfa5gg2fw0000000200000000008ugn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:50 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:50 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:50 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: b140b4a4-501e-000a-80f9-240180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163050Z-15b8d89586frzkk2umu6w8qnt80000000ctg00000000ndey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:30:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:50 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:50 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:50 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: fc96bee5-501e-00a3-3f0b-22c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163050Z-16849878b78gvgmlcfru6nuc5400000006bg00000000naqn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:50 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:51 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:51 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:51 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 00f7314e-e01e-0052-48ac-21d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163051Z-16849878b787c9z7hb8u9yysp000000006mg000000006w9h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:51 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:51 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:51 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: e5cf95c3-101e-0046-32f2-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163051Z-15b8d89586frzkk2umu6w8qnt80000000cy000000000956f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:51 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:51 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:51 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:51 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163051Z-16849878b787psctgubawhx7k8000000066000000000tkxy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:51 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:51 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:51 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:51 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bb725c57-501e-005b-0eab-21d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163051Z-16849878b78fmrkt2ukpvh9wh400000006f0000000006smz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:51 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:52 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:52 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:52 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163052Z-16849878b782h9tt5z2wa5rfxg00000006e000000000a9pv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:52 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:52 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:52 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:52 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163052Z-16849878b786vsxz21496wc2qn00000006k000000000b3s2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:52 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:52 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:52 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:52 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 56a14f83-001e-002b-1ff2-2499f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163052Z-r197bdfb6b4kzncf21qcaynxz800000000r0000000003fh1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:52 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:52 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:52 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163052Z-16849878b78k8q5pxkgux3mbgg00000006d000000000e0s7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:52 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:53 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:53 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:53 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163053Z-16849878b78q4pnrt955f8nkx8000000069g00000000k403 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:53 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:53 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:53 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163053Z-16849878b78p6ttkmyustyrk8s00000006dg0000000051dr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:53 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:53 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:53 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: e3c75742-001e-0014-79f3-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163053Z-r197bdfb6b4h2vctng0a0nubg800000009mg0000000051wc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:53 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:53 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:53 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:53 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163053Z-16849878b787psctgubawhx7k8000000069000000000dh8y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:53 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:54 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:54 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: e7f2251b-001e-0017-4fad-240c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163054Z-15b8d89586ff5l62quxsfe8ugg0000000cs000000000907q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:54 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:54 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:54 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:54 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 8700b1e1-801e-008f-0e93-212c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163054Z-16849878b787c9z7hb8u9yysp000000006eg00000000shv5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:54 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:54 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:54 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:54 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 3f3879b0-501e-0035-0b40-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163054Z-16849878b788tnsxzb2smucwdc00000006b000000000yvpm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:54 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:54 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:54 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:54 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 43d69f68-001e-00ad-61b4-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163054Z-15b8d89586fbt6nf34bm5uw08n00000001ng00000000a8mp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:54 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:55 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:55 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:55 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 07f9ef03-d01e-0014-614d-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163055Z-16849878b78mhkkf6kbvry07q0000000069000000000peu1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:30:55 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:55 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:55 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:55 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 9658a421-401e-008c-7ff3-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163055Z-15b8d89586fvk4kmwqg9fgbkn800000001x000000000rzmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:55 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:55 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:55 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:55 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 3e897e27-701e-006f-014d-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163055Z-16849878b789m94j7902zfvfr000000006b000000000dwn2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:30:55 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:55 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:55 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:55 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: e5dab064-101e-0046-04f5-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163055Z-r197bdfb6b4gdlhqw6kbe0ekvs00000009g000000000azs3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:55 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:56 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:56 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:56 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163056Z-16849878b78s2lqfdex4tmpp7800000006k0000000003qxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:56 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:56 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:56 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:56 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163056Z-16849878b78c2tmb7nhatnd68s00000006e000000000hzwv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:56 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:56 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:56 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:56 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 6d204e33-301e-0099-5818-246683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163056Z-r197bdfb6b4lbgfqheuaxfm7xn0000000g1g000000007afc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:56 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:56 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:56 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:56 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163056Z-16849878b78ngdnlw4w0762cms00000006ng000000001y43 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:56 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:56 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:57 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:56 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163056Z-16849878b78k46f8kzwxznephs00000006a000000000htz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:57 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:56 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:58 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:57 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2653a72e-001e-005a-26e6-21c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163057Z-16849878b787c9z7hb8u9yysp000000006e000000000vb00 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:58 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:58 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:58 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 7082da1f-601e-003d-073e-226f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163058Z-16849878b78rjhv97f3nhawr7s00000006cg00000000g5mm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:58 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:58 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:58 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:58 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 531fb3e5-001e-00a2-2356-23d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163058Z-r197bdfb6b4kzncf21qcaynxz800000000ng00000000d0tm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:58 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:59 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 40a513cc-e01e-0051-0ef3-2484b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163059Z-r197bdfb6b49q495mwyebb3r6s00000009e0000000008mar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:59 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:59 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7fcc546d-701e-001e-80a3-21f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163059Z-16849878b785jsrm4477mv3ezn000000069g00000000t8am x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:59 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:59 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 100b0a78-f01e-0003-754e-224453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163059Z-16849878b786vsxz21496wc2qn00000006e000000000v1be x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:59 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:30:59 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14f65908-801e-008f-32d6-202c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163059Z-16849878b78lhh9t0fb3392enw00000006d0000000006b2e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:30:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:59 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:30:59 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 7844842a-001e-0034-8015-25dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163059Z-r197bdfb6b4kzncf21qcaynxz800000000q0000000007pgw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:00 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:30:59 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:00 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6a252cba-901e-0029-59f2-24274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163100Z-r197bdfb6b4qpk6v9629ad4b5s0000000b2000000000bxgq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:00 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:00 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:00 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:00 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 7cfbc72c-d01e-0082-6d55-22e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163100Z-16849878b78mhkkf6kbvry07q000000006e0000000003246 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:31:00 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:00 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:00 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 217788b5-401e-0016-11a2-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163100Z-16849878b78fmrkt2ukpvh9wh400000006b000000000q2wy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:00 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:00 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:00 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163100Z-16849878b78mhkkf6kbvry07q000000006e000000000325t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:01 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:01 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: fc13fe58-401e-000a-0af3-244a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163101Z-15b8d89586ff5l62quxsfe8ugg0000000cr000000000b227 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:01 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:01 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:01 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:01 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 25ee231e-901e-0083-60ac-24bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163101Z-15b8d89586flspj6y6m5fk442w00000003dg00000000mkg9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:01 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:01 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:01 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:01 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 143ffe56-901e-0067-3a0b-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163101Z-16849878b789m94j7902zfvfr000000006bg00000000c65b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:01 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:01 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:01 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:01 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: c0884099-101e-0046-3a40-2291b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163101Z-16849878b787psctgubawhx7k8000000069000000000dhu0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:01 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:02 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: efcdf68a-a01e-0084-49f2-249ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163102Z-15b8d89586ff5l62quxsfe8ugg0000000cpg00000000gvwz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:02 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:02 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: e7a8c7ed-d01e-00ad-4ff5-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163102Z-r197bdfb6b4lbgfqheuaxfm7xn0000000g50000000000wyd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:02 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:02 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:02 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:02 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: f2361012-b01e-003e-18e4-218e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163102Z-16849878b78s2lqfdex4tmpp7800000006g000000000b3ae x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:02 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:02 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:02 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:02 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 5441351c-201e-000c-2bf5-2479c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163102Z-r197bdfb6b4tq6ld2w31u8wmcc0000000mzg000000004hup x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:31:02 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:03 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:03 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 931f542e-301e-000c-75f2-21323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163103Z-16849878b787sbpl0sv29sm89s00000006hg00000000d3va x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:03 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:03 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:03 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:03 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163103Z-16849878b78dghrpt8v731n7r400000006d00000000074kg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:03 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:03 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:03 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 28e3a13f-d01e-0049-4f16-25e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163103Z-r197bdfb6b4tq6ld2w31u8wmcc0000000mvg00000000dpr2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:03 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:03 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: d2bab0c5-801e-0078-24f3-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163103Z-r197bdfb6b4tq6ld2w31u8wmcc0000000mxg000000007vp6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:03 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 39b78571-501e-0016-43f4-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163104Z-15b8d89586f8l5961kfst8fpb0000000081g000000007unn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:04 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:04 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:04 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163104Z-16849878b785g992cz2s9gk35c00000006kg000000001c9s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:04 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49890	13.107.246.45	443	5884	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:04 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:04 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:04 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163104Z-16849878b786wvrz321uz1cknn00000006g000000000bhba x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:04 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:04 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:04 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163104Z-16849878b78gvgmlcfru6nuc5400000006dg00000000ct10 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:04 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:04 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:04 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:04 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 5a53efb7-001e-0034-5556-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163104Z-r197bdfb6b4rt57kw3q0f43mqg0000000au0000000003z8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:04 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:04 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:04 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163104Z-16849878b788tnsxzb2smucwdc00000006cg00000000v0wc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:31:05 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:04 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:04 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0856d5df-001e-00ad-56f3-24554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163104Z-r197bdfb6b4kkm8440c459r6k800000000gg000000009e87 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:31:05 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:05 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:05 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:05 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163105Z-16849878b78bkvbz1ry47zvsas00000006e000000000kr98 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:05 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:05 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:05 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:05 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: aaf6fada-701e-0053-683a-223a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163105Z-16849878b78k8q5pxkgux3mbgg00000006gg0000000014er x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:05 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:05 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:05 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:05 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 273a8d1a-001e-0034-0d8c-21dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163105Z-16849878b78z5q7jpbgf6e9mcw00000006eg00000000rv4t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:05 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:05 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:05 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:05 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 7edb8da2-f01e-0099-33f3-249171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163105Z-15b8d89586fvk4kmwqg9fgbkn800000001xg00000000q81x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:05 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:06 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:06 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:06 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9f3a3312-201e-0096-7bbe-20ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163106Z-16849878b785jsrm4477mv3ezn00000006e000000000ahem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:06 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:06 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:06 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:06 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: ef146494-c01e-00a1-274d-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163106Z-16849878b78q4pnrt955f8nkx800000006ag00000000g57p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:06 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:06 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:06 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:06 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 33ffbe2f-201e-0085-3800-2534e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163106Z-15b8d89586f6nn8zquf2vw6t5400000003m000000000cgvp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:06 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:06 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:06 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:06 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd6db9b0-d01e-002b-01ae-2425fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163106Z-15b8d89586fhl2qtatrz3vfkf000000003f000000000s6x5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:06 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:07 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:07 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:07 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 1cf67cf7-e01e-000c-32f3-248e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163107Z-r197bdfb6b487xlkrahepdse5000000007x000000000ckcx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:07 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:07 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:07 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:07 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 53594826-c01e-0082-6cf3-24af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163107Z-r197bdfb6b4rt57kw3q0f43mqg0000000as0000000008sq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:07 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:07 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:07 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:07 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6129b0de-c01e-00a1-59fb-247e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163107Z-15b8d89586fwzdd8urmg0p1ebs00000007y000000000g2ya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:07 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:07 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:07 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:07 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 8d011c5a-801e-0047-22f7-217265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163107Z-16849878b78p6ttkmyustyrk8s00000006d0000000006vsu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:07 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:08 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:08 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:08 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 84d8b792-101e-008e-7ffc-24cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163108Z-15b8d89586fnsf5zm1ryrxu0bc00000001yg00000000bx5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:31:08 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:08 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:08 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:08 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 9791ae07-d01e-0066-7bf2-24ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163108Z-r197bdfb6b46gt25anfa5gg2fw00000001yg00000000dm1r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:08 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:08 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:08 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:08 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 04521c86-e01e-0003-3ff4-240fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163108Z-15b8d89586fdmfsg1u7xrpfws0000000020000000000ek6m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:31:08 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:08 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:08 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:08 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 94ed8cc5-801e-0083-11f2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163108Z-15b8d89586f42m673h1quuee4s00000001wg00000000709w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:08 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:08 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:08 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:08 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: f9655ebd-a01e-0098-64f2-248556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163108Z-r197bdfb6b4vlqfn9hfre6k1s80000000b70000000005u2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:08 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49913	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:08 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:09 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:08 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2a979a5c-f01e-003f-77f7-21d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163108Z-16849878b78plcdqu15wsb886400000006bg00000000ne72 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:09 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49915	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:09 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:09 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:09 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: e092e42d-501e-0035-603a-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163109Z-16849878b78jfqwd1dsrhqg3aw00000006e000000000u3cf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:09 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49916	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:09 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:09 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:09 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 8e7afceb-101e-007a-50f3-24047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163109Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000ax00000000052s4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:09 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49917	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:09 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:09 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:09 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: f9504115-401e-0083-703b-22075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163109Z-16849878b78q4pnrt955f8nkx800000006e0000000002he4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:09 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49918	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:09 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:09 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:09 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 6115116d-c01e-00a1-6ef4-247e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163109Z-15b8d89586f42m673h1quuee4s00000001w00000000098rf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:09 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49919	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:09 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:10 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:09 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 95bc9e17-201e-0051-77f2-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163109Z-15b8d89586fnsf5zm1ryrxu0bc00000001yg00000000bx9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:31:10 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49921	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:10 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:10 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:10 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: c483ecd9-701e-0053-6ff4-243a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163110Z-15b8d89586fhl2qtatrz3vfkf000000003fg00000000qv5f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:31:10 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49923	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:10 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:10 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:10 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 95bc9e61-201e-0051-3bf2-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163110Z-15b8d89586fnsf5zm1ryrxu0bc00000001z000000000b54e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:10 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49922	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:10 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:10 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:10 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 094c1a0f-c01e-0066-77f2-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163110Z-15b8d89586f8l5961kfst8fpb000000007wg00000000nb9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:31:10 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49925	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:10 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:10 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:10 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 714dabad-d01e-0065-43fc-24b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163110Z-r197bdfb6b4rt57kw3q0f43mqg0000000at0000000006xmk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:10 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49926	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:11 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:11 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:11 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a7868e79-001e-0049-77f2-245bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163111Z-r197bdfb6b4qpk6v9629ad4b5s0000000b0000000000nbrq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:11 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49928	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:11 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:11 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:11 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: e3c3ecc6-001e-0014-1bf2-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163111Z-r197bdfb6b4vlqfn9hfre6k1s80000000b7g000000005ke7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:11 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49927	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:11 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:11 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:11 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: e8b9c1e5-a01e-001e-79f2-2449ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163111Z-15b8d89586f989rks44whx5v7s0000000ctg00000000ncd0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:31:11 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49930	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:11 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:11 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:11 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9b0a187b-e01e-0020-61f3-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163111Z-15b8d89586fst84k5f3z220tec0000000d6000000000106r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:31:11 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49931	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:12 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:12 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:12 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f5f98d55-001e-0049-58e4-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163112Z-16849878b787sbpl0sv29sm89s00000006n0000000004nn0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:12 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49933	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:12 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:12 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:12 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 2205bf6d-901e-0016-1ef4-24efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163112Z-r197bdfb6b4cz6xrsdncwtgzd40000000n4g000000000zq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:12 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49932	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:12 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:12 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:12 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c944a0c5-101e-005a-7340-22882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163112Z-16849878b786vsxz21496wc2qn00000006hg00000000dcaq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:12 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49940	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:13 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:13 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:13 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 0f1f7291-c01e-0066-7d17-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163113Z-r197bdfb6b46gt25anfa5gg2fw00000001vg00000000ue6t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:13 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49939	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:13 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:13 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:13 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 74c47345-e01e-00aa-3afd-24ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163113Z-15b8d89586ffsjj9qb0gmb1stn00000001w000000000nyf2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:31:13 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49941	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:13 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:13 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:13 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 4e9f4159-f01e-005d-3228-2113ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163113Z-16849878b78dghrpt8v731n7r400000006e0000000002hem x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:13 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49942	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:13 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:13 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:13 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: af610e67-501e-007b-1855-225ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163113Z-16849878b7862vlcc7m66axrs000000006e000000000k2b5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:31:13 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49943	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:14 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:14 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:14 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 8522a688-a01e-0084-2768-219ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163114Z-16849878b78lhh9t0fb3392enw00000006a000000000h5cm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:14 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49944	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:14 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:14 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:14 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: efa6dde7-e01e-0071-750c-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163114Z-16849878b788tnsxzb2smucwdc00000006e000000000kwd8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:14 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49945	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:14 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:14 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 4481152a-601e-0001-4b55-22faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163114Z-16849878b78p6ttkmyustyrk8s000000068g00000000rv95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:14 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49946	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:14 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:14 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:14 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 474bc074-b01e-0002-67b0-201b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163114Z-16849878b78k8q5pxkgux3mbgg00000006a000000000u4bm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:14 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49949	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:15 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:15 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:15 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 4fea8089-201e-0071-08f4-24ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163115Z-r197bdfb6b4lkrtc7na2dkay2800000001rg00000000s7sa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:15 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49947	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:15 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:15 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:15 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6e18d5c3-a01e-00ab-48f4-249106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163115Z-r197bdfb6b4r9fwfyb63s04k3n00000007cg00000000kf4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:15 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49950	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:15 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:15 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:15 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 264b7e39-001e-0028-804e-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163115Z-16849878b782h9tt5z2wa5rfxg00000006f0000000007732 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:15 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49951	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:15 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:15 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:15 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 21fe56fb-901e-0016-40f2-24efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163115Z-r197bdfb6b4lbgfqheuaxfm7xn0000000fxg00000000fcd3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:15 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49953	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:16 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:16 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:16 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: ce674b06-f01e-0052-7d0b-229224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163116Z-16849878b78gvgmlcfru6nuc5400000006a000000000urue x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:16 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49954	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:16 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:16 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 03ef3c5b-d01e-007a-4ff2-24f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163116Z-15b8d89586fdmfsg1u7xrpfws000000001zg00000000g40s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:16 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49952	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:16 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:16 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:16 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: e081a540-501e-0035-2133-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163116Z-16849878b7862vlcc7m66axrs000000006f000000000ehwe x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:16 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49955	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:16 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:16 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:16 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 1e800eab-b01e-001e-7ff5-240214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163116Z-15b8d89586fqj7k5uht6e8nnew0000000cgg00000000tggx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:31:16 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49956	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:17 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:17 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:17 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 759e4688-301e-003f-78f2-24266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163117Z-15b8d89586fxdh48qknu9dqk2g00000001mg00000000rcsg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:17 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49957	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:17 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:17 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:17 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 4bb44360-d01e-005a-0414-227fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163117Z-16849878b78jfqwd1dsrhqg3aw00000006p000000000014t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:17 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49958	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:17 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:17 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:17 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b1eeebb-201e-0051-0fab-217340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163117Z-16849878b78z5q7jpbgf6e9mcw00000006eg00000000rvzk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:17 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49959	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:17 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:17 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:17 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: ba3ed362-301e-0099-2f30-216683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163117Z-16849878b78rjhv97f3nhawr7s00000006b000000000q1ym x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:17 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49961	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:18 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:18 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 10ca92f3-d01e-008e-1b31-22387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163118Z-16849878b788tnsxzb2smucwdc00000006hg000000005wrf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:18 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49963	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:18 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:18 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 35e941fb-301e-005d-58de-21e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163118Z-16849878b78dghrpt8v731n7r400000006e0000000002hnn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49962	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:18 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:18 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: dfbb9110-801e-008f-2ef4-242c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163118Z-15b8d89586f42m673h1quuee4s00000001w000000000994v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:18 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49964	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:18 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:18 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 2282242b-b01e-0084-2155-22d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163118Z-16849878b78bkvbz1ry47zvsas00000006kg000000001fh8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49965	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:19 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:19 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:19 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: cea835a8-f01e-003f-6ff3-24d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163119Z-r197bdfb6b4kkrkjudg185sarw00000000hg000000004zfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 16:31:19 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49968	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:19 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:19 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: e4ee02ab-c01e-00ad-3df9-24a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163119Z-r197bdfb6b49k6rsrbz098tg8000000003r00000000013dx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:19 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49966	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:19 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 16:31:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 16:31:19 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: f0353451-e01e-0071-7340-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T163119Z-16849878b7862vlcc7m66axrs000000006k00000000039hc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 16:31:19 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49974	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 16:31:24 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yTWkex4NXVntyPx&MD=271To5Sy HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 16:31:25 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: dab83a7d-96c7-4c89-ba2e-05e86ebdce09 MS-RequestId: c21c3b7c-5464-4b05-a791-558af0ae45de MS-CV: +hO/MmK1qkGHXyay.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 16:31:23 GMT Connection: close Content-Length: 30005
2024-10-23 16:31:25 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-23 16:31:25 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3576, Parent PID: 5368

General

Target ID:	0
Start time:	12:30:28
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5884, Parent PID: 3576

General

Target ID:	2
Start time:	12:30:30
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1992,i,8530768926833369009,6162970178255102418,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5780, Parent PID: 5368

General

Target ID:	3
Start time:	12:30:33
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://go.microsoft.com/fwlink/?LinkId=521839"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://go.microsoft.com/fwlink/?LinkId=521839

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Windows Analysis Report
https://go.microsoft.com/fwlink/?LinkId=521839