Edit tour

Windows Analysis Report
https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10

Overview

General Information

Sample URL:	https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10
Analysis ID:	1540704
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains password input but no form action

Classification

Process Tree

System is w10x64

chrome.exe (PID: 8 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5100 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1904,i,11327631970205537496,6943746547395598485,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6932 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6020 --field-trial-handle=1904,i,11327631970205537496,6943746547395598485,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6940 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4792 --field-trial-handle=1904,i,11327631970205537496,6943746547395598485,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=307457178&timestamp=1729726227520
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=307457178&timestamp=1729726227520
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=307457178&timestamp=1729726227520
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: Iframe src: /_/bscframe

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: No favicon

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-972817213%3A1729726216484755&ddm=0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49849 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10 HTTP/1.1Host: chat.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=307457178&timestamp=1729726227520 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=ad1xLCq2hXZEXS2b_w81-bXIw0Wt0kgpusZ1eKBrl5n5rMqKZLGCNP4gFCaXTPm3raifO-xp4esAYH9bwGtPdGVDB-F1Z4xvuJnqAmLFJUxgL5YD3OKy_4oIkL9XJtIjAWle3qozJ4dXf37y3akTitboe3l8ESdOhzCEhp_-DnVZses0AQ
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=ENIOtz2kh9H8fPbIMcbROWjk4WP-1rY6U-AFmp7cK_QEbxuIa_K2Sf8UF3d8gznd23x3fEuQj1_oQvdmsobAEtdx3avG8B2NdDME0yo-nt0MNZOCS9LhcMLu_Wly69AXxE-v1VdozTBd03fIbQSJyc3PWIS2x43sBPyv3eYOi-b6dCDzwUobR_q4lQ
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: chromecache_60.2.dr

String found in binary or memory: _.qq(p)+"/familylink/privacy/notice/embedded?langCountry="+_.qq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.qq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.qq(_.zq(c))+"&hl="+_.qq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.qq(m)+"/chromebook/termsofservice.html?languageCode="+_.qq(d)+"&regionCode="+_.qq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: chat.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 522sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"Content-Type: application/x-www-form-urlencoded;charset=UTF-8sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"X-Goog-AuthUser: 0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://accounts.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=ad1xLCq2hXZEXS2b_w81-bXIw0Wt0kgpusZ1eKBrl5n5rMqKZLGCNP4gFCaXTPm3raifO-xp4esAYH9bwGtPdGVDB-F1Z4xvuJnqAmLFJUxgL5YD3OKy_4oIkL9XJtIjAWle3qozJ4dXf37y3akTitboe3l8ESdOhzCEhp_-DnVZses0AQ

Source: chromecache_60.2.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_60.2.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: chromecache_73.2.dr, chromecache_61.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
Source: chromecache_60.2.dr	String found in binary or memory: https://families.google.com/intl/
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://g.co/recover
Source: chromecache_60.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://play.google.com/work/enroll?identifier=
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://play.google/intl/
Source: chromecache_60.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_60.2.dr	String found in binary or memory: https://policies.google.com/privacy/additional
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://policies.google.com/privacy/google-partners
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://policies.google.com/technologies/location-data
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://policies.google.com/terms/location
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_darkmode_1x.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_silent_tap_yes_darkmode.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes_darkmode.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_dark_v2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_v2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_dark_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_darkmode_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_darkmode_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_darkmode_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_darkmode_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_darkmode_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_73.2.dr, chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/who_will_be_using_this_device.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_dark_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_v1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_dark_v1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_v1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_dark_v1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_v1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_dark_0.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_dark_2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_dark_2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_dark_2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_dark_2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_dark_3.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_dark_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_dark_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_dark_2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_dark_1.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_dark_2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_dark_v2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_v2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set_darkmode.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_dark_v2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_v2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_73.2.dr, chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space_dark.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2_dark.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess.svg
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess_dark.svg
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_60.2.dr	String found in binary or memory: https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
Source: chromecache_73.2.dr, chromecache_61.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_60.2.dr	String found in binary or memory: https://www.google.com/intl/
Source: chromecache_61.2.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_61.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_61.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_61.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_61.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_61.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://www.youtube.com/t/terms?chromeless=1&hl=
Source: chromecache_70.2.dr, chromecache_60.2.dr	String found in binary or memory: https://youtube.com/t/terms?gl=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49849 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@22/44@12/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1904,i,11327631970205537496,6943746547395598485,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6020 --field-trial-handle=1904,i,11327631970205537496,6943746547395598485,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4792 --field-trial-handle=1904,i,11327631970205537496,6943746547395598485,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1904,i,11327631970205537496,6943746547395598485,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6020 --field-trial-handle=1904,i,11327631970205537496,6943746547395598485,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4792 --field-trial-handle=1904,i,11327631970205537496,6943746547395598485,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://play.google/intl/	0%	URL Reputation	safe
https://families.google.com/intl/	0%	URL Reputation	safe
https://policies.google.com/technologies/location-data	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://policies.google.com/privacy/google-partners	0%	URL Reputation	safe
https://policies.google.com/terms/service-specific	0%	URL Reputation	safe
https://g.co/recover	0%	URL Reputation	safe
https://policies.google.com/privacy/additional	0%	URL Reputation	safe
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	0%	URL Reputation	safe
https://policies.google.com/technologies/cookies	0%	URL Reputation	safe
https://policies.google.com/terms	0%	URL Reputation	safe
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	0%	URL Reputation	safe
https://support.google.com/accounts?hl=	0%	URL Reputation	safe
https://policies.google.com/terms/location	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://support.google.com/accounts?p=new-si-ui	0%	URL Reputation	safe
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www3.l.google.com	142.250.186.46	true	false	unknown
play.google.com	142.250.185.110	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
chat.google.com	142.250.185.110	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
accounts.youtube.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10	false	unknown
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	unknown
https://www.google.com/favicon.ico	false	unknown
https://play.google.com/log?hasfast=true&authuser=0&format=json	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://play.google/intl/	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://families.google.com/intl/	chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://youtube.com/t/terms?gl=	chromecache_70.2.dr, chromecache_60.2.dr	false		unknown
https://policies.google.com/technologies/location-data	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/	chromecache_60.2.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_73.2.dr, chromecache_61.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy/google-partners	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/work/enroll?identifier=	chromecache_70.2.dr, chromecache_60.2.dr	false		unknown
https://policies.google.com/terms/service-specific	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://g.co/recover	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy/additional	chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/technologies/cookies	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_73.2.dr, chromecache_61.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_70.2.dr, chromecache_60.2.dr	false		unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_60.2.dr	false		unknown
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_70.2.dr, chromecache_60.2.dr	false		unknown
https://support.google.com/accounts?hl=	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms/location	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy	chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/accounts?p=new-si-ui	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	chromecache_70.2.dr, chromecache_60.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.46	www3.l.google.com	United States	15169	GOOGLEUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
142.250.185.110	play.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540704
Start date and time:	2024-10-24 01:29:14 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@22/44@12/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.174, 216.58.206.35, 108.177.15.84, 34.104.35.123, 142.250.186.131, 4.245.163.56, 142.250.181.227, 142.250.185.106, 142.250.181.234, 142.250.186.74, 172.217.18.10, 142.250.186.42, 216.58.206.42, 142.250.185.202, 142.250.186.138, 142.250.185.234, 142.250.185.74, 216.58.212.138, 142.250.186.106, 142.250.184.234, 142.250.185.170, 172.217.16.202, 142.250.185.138, 93.184.221.240, 52.165.164.15, 192.229.221.95, 74.125.133.84, 40.69.42.241, 142.250.186.99, 64.233.167.84, 142.251.173.84
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10

Input	Output
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&se Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&se Model: claude-3-haiku-20240307	```json { "brands": [ "Google" ] }
	```json { "brands": [ "Google" ] }
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&se Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Enter an email or phone number", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&se Model: claude-3-haiku-20240307	```json { "brands": [ "Google" ] }
	```json { "brands": [ "Google" ] }
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&se Model: gpt-4o	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are typical for a Google account login page." ], "riskscore": 1}
URL: accounts.google.com Brands: Google Input Fields: Email or phone
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqe-uR3ad381WfTqTR3htfVhW69vGFraadiwQXszy-xAvvMfGIq_9bggZKBlJsEhGS3AUy0fRQ&osid=1&passive=1209600&se Model: gpt-4o	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are typical for a Google account login page." ], "riskscore": 1}
URL: accounts.google.com Brands: Google Input Fields: Email or phone

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	downloaded
Size (bytes):	697087
Entropy (8bit):	5.598635112678657
Encrypted:	false
SSDEEP:	6144:Tfq3MngtoytLBhooIc/qttkPlqYbpSG2YKWinpxp4BGS3T3vJyNLZA9:TMugtVLvh+kxt2YKW2U9
MD5:	D3826A5CC52F48B01C237E819E5560D3
SHA1:	A261BE3EDDFA2499E3A80E0FDBC547F5615D4A04
SHA-256:	080886B0861A19AF74DE0570C6E976BF1FE77247CF8BD7635F32425B7E8F25BA
SHA-512:	5A4D8769E91F93255AE3AF8712E55807997336190E6D045D21F8F9ED51061D953A97C15E9352F227D71F6CD5665311E3AB42EBA90931A447091A438144B423B0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEbgYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlENVF1wwyGcC3UcchLKdoB1ttzXUg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,XVq9Qb,STuCOe,njlZCf,m9oV,vjKJJ,y5vRwf,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,qPfo0c,cYShmd,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,WpP9Yc,lwddkf,SpsfSb,aC1iue,tUnxGc,aW3pY,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,xBaz7b,eVCnO,LDQI"
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	downloaded
Size (bytes):	747743
Entropy (8bit):	5.791827390083392
Encrypted:	false
SSDEEP:	3072:CTwIHOQcksvLwFzy0ltT4vzq20cy2eWzKRncURgoSdwInhPaZSvLGjCfDx/ludbZ:CrLWUzy0lVP9nz10BodLLMdUAUGiTjN
MD5:	3A9A48D4BCBDE8D244B9F4F9E39951EF
SHA1:	BB7625E26262C3CCCE4BA0699D94AB48D050D121
SHA-256:	9E6FDC370CF2D15FF98E41CE885EB6B83E0D5C5B844AF7A8F8CF35F11089AC26
SHA-512:	7DD122157FCE668146834D3642D70AFBD370A8F1B6F602D0353C85174AEC408A5C89473B2A3F5A1222769FB79569B147B7211D6C7428D7585C3438723C17E5E3
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/am=5AzGkWEbgYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlEQ6UolhQlEHgaeUkDymV5Angs4gQ/m=_b,_tp"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x11c60ce4, 0x2046d86, 0x1a784f88, 0x11406f40, 0x72102, 0x0, 0x0, 0x2000001b, 0x61e, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Qa,Ua,gaa,iaa,mb,qaa,waa,Caa,Kaa,Maa,Paa,Lb,Qaa,Rb,Tb,Ub,Raa,Saa,Vb,Taa,Uaa,Vaa,Zb,$aa,bba,hc,ic,jc,gba,hba,lba,nba,pba,qba,uba,xba,rba,wba,vba,tba,sba,yba,Cba,Gba,Hba,Eba,Ic,Jc,Kba,Mba,Rba,Sba,Tba,Uba,Vba,Wba,Pba,Qba,Yba,hd,aca,bca,dca,fca,eca,hca,ica,jca,kca,mca,lca,oca,pca,qca,r

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	3467
Entropy (8bit):	5.532497526299779
Encrypted:	false
SSDEEP:	96:oUvuxTBvdhUoGnHVPGjtwtaK8+0g/Ikhw:Hu5Bvdh8VJn0gxy
MD5:	3ED8C8DB9640906244F3E3D4572E5FC5
SHA1:	20E1A5F9D100820D3F5BA5BE64EC30BEACA759E0
SHA-256:	CDC1418D81D8BB2E5F6352531DDAE3D35F41E88D62BB16990F52D831DE6C98B2
SHA-512:	95AB6EEBDA369F61E9E5AD7A6C703101B8DA27AA420915D9A3A5631593DC4BF07B3EBB9F88FE30A4D6B7E68347A8A95CAC63157B9DDD6A87B94CA7742143C347
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEbgYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlENVF1wwyGcC3UcchLKdoB1ttzXUg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var Jya=function(){var a=_.Le();return _.gk(a,1)},yu=function(a){this.Da=_.u(a,0,yu.messageId)};_.K(yu,_.w);yu.prototype.Ha=function(){return _.Sj(this,1)};yu.prototype.Ua=function(a){return _.rk(this,1,a)};yu.messageId="f.bo";var zu=function(){_.Fm.call(this)};_.K(zu,_.Fm);zu.prototype.zd=function(){this.sU=!1;Kya(this);_.Fm.prototype.zd.call(this)};zu.prototype.aa=function(){Lya(this);if(this.KD)return Mya(this),!1;if(!this.vW)return Au(this),!0;this.dispatchEvent("p");if(!this.oQ)return Au(this),!0;this.xN?(this.dispatchEvent("r"),Au(this)):Mya(this);return!1};.var Nya=function(a){var b=new _.qp(a.R5);a.fR!=null&&_.bo(b,"authuser",a.fR);return b},Mya=function(a){a.KD=!0;var b=Nya(a),c="rt=r&f_uid="+_.Qk(a.oQ);_.wn(b,(0,_.gg)(a.ea,a),"POST",c)};.zu.prototype.ea=function(a){a=a.target;Lya(this);if(_.zn(a)){this.WK=0;if(this.xN)this.KD=!1,this.dispatchEvent("r"

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (395)
Category:	dropped
Size (bytes):	1608
Entropy (8bit):	5.272260972196049
Encrypted:	false
SSDEEP:	48:o7dNGEF1HN/EJShSZuLpfMxISN+oP7D8bBrw:o1sSEZumJcRw
MD5:	0823F12FAB09559EE0684B4B6F6F9329
SHA1:	D2AC8628F2CA985373CF0B6E9A9409288C9F0A52
SHA-256:	5DEAF459D657397CFDE8AB99C38E196624A0F1CCC4873EAC7C427E95CA5AD0C9
SHA-512:	2035BCC69738F041366DA6F9E5CC744BBE3BF89E1E413FD526D53C29C32556668F65BF07760714C7DCF300557913D45E00F56BA2DAF472A6E1FA2327569C793D
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Cg(_.Yla);_.MA=function(a){_.X.call(this,a.Fa);this.aa=a.Xa.cache};_.K(_.MA,_.X);_.MA.Ba=function(){return{Xa:{cache:_.Ft}}};_.MA.prototype.execute=function(a){_.Db(a,function(b){var c;_.ef(b)&&(c=b.hb.jc(b.mb));c&&this.aa.tH(c)},this);return{}};_.Nu(_.dma,_.MA);._.l();._.k("ZDZcre");.var aI=function(a){_.X.call(this,a.Fa);this.Lm=a.Ea.Lm;this.Z4=a.Ea.metadata;this.aa=a.Ea.Rt};_.K(aI,_.X);aI.Ba=function(){return{Ea:{Lm:_.FH,metadata:_.v0a,Rt:_.CH}}};aI.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Db(a,function(c){var d=b.Z4.getType(c.Od())===2?b.Lm.Pb(c):b.Lm.fetch(c);return _.bm(c,_.GH)?d.then(function(e){return _.Id(e)}):d},this)};_.Nu(_.ima,aI);._.l();._.k("K5nYTd");._.u0a=new _.uf(_.ema);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var IH=function(a){_.X.call(this,a.Fa);this.aa=a.Ea.jR};_.K(IH,_.X);IH.Ba=func

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	dropped
Size (bytes):	3131
Entropy (8bit):	5.415855705012616
Encrypted:	false
SSDEEP:	48:o7sNi+ANA3yPwR5jNQ8jse8sw5oO/A3NPA3SjpG6LEzX9TW5BnXkMQJIPlLt1lL8:ogHyY5jOTjT2ltvLKNinSJQttw
MD5:	AE39AA2753F5BE40292E997B553AB30F
SHA1:	036CB8D65465045CC0EBD597F7664CF088C3F0C6
SHA-256:	DE82B874D2ECB868246E96494BF4C373618C25A5E04E4FF33B39B2CA8E2D29D6
SHA-512:	BCC4825891B1760F9104D937E4E7FF86EE42D3D89342AF08D70D4E86E9B15A89CCCE5B70C89D684090318C1CA3F8007BA8FE657CA131164DB0B2511CC71007A0
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var OA=function(a){_.X.call(this,a.Fa)};_.K(OA,_.X);OA.Ba=_.X.Ba;OA.prototype.dT=function(a){return _.cf(this,{Xa:{bU:_.Pl}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.xi(function(e){window._wjdc=function(f){d(f);e(NKa(f,b,a))}}):NKa(c,b,a)})};var NKa=function(a,b,c){return(a=a&&a[c])?a:b.Xa.bU.dT(c)};.OA.prototype.aa=function(a,b){var c=_.Ura(b).zk;if(c.startsWith("$")){var d=_.Em.get(a);_.Fq[b]&&(d\|\|(d={},_.Em.set(a,d)),d[c]=_.Fq[b],delete _.Fq[b],_.Gq--);if(d)if(a=d[c])b=_.ff(a);else throw Error("Jb`"+b);else b=null}else b=null;return b};_.Nu(_.Vfa,OA);._.l();._.k("SNUn3");._.MKa=new _.uf(_.Dg);._.l();._.k("RMhBfe");.var OKa=function(a){var b=_.Eq(a);return b?new _.xi(function(c,d){var e=function(){b=_.Eq(a);var f=_.bga(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	dropped
Size (bytes):	5050
Entropy (8bit):	5.3019521130781655
Encrypted:	false
SSDEEP:	96:oMMRpyvkMmrDbBargZEi/PggzLmwC8Vh11PGmtjGTsECOFpw:ip7MQE4Ei/PgIBjmmepR6
MD5:	56879DD8886F803593865378D078E00A
SHA1:	7225C36DEEFBDFB2386747582CF19D17C480B724
SHA-256:	113A7E4489B214342173C9A39D2D6ACF444E13D9B61C05649B1FA3A21EBE018B
SHA-512:	26969E03C7CC01C747DA3BB25ECF7C0B8F3A9AF863BC5FA5FC20F12F7A1608265122701DA115184DAF285B3112F24228CDFEFE0E834055CD201B79A71CEE9BA1
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.aOa=_.z("wg1P6b",[_.DB,_.Vn,_.co]);._.k("wg1P6b");.var x7a;x7a=_.yh(["aria-"]);._.oK=function(a){_.Y.call(this,a.Fa);this.La=this.Aa=this.aa=this.viewportElement=this.Na=null;this.Kc=a.Ea.xf;this.ab=a.Ea.focus;this.Fc=a.Ea.Fc;this.ea=this.Ui();a=-1*parseInt(_.Ro(this.Ui().el(),"marginTop")\|\|"0",10);var b=parseInt(_.Ro(this.Ui().el(),"marginBottom")\|\|"0",10);this.Ta={top:a,right:0,bottom:b,left:0};a=_.hf(this.getData("isMenuDynamic"),!1);b=_.hf(this.getData("isMenuHoisted"),!1);this.Ga=a?1:b?2:0;this.ka=!1;this.Ca=1;this.Ga!==1&&(this.aa=this.Sa("U0exHf").children().Vc(0),_.Iu(this,.y7a(this,this.aa.el())));_.nG(this.wa())&&(a=this.wa().el(),b=this.De.bind(this),a.__soy_skip_handler=b)};_.K(_.oK,_.Y);_.oK.Ba=function(){return{Ea:{xf:_.UF,focus:_.FF,Fc:_.Ru}}};_.oK.prototype.pz=function(a){var b=a.source;this.Na=b;var c;((c=a.data)==null?0:c.kA)?(a=a.data.kA,this.Ca=a==="MOUS

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (468)
Category:	dropped
Size (bytes):	1964
Entropy (8bit):	5.298383529084959
Encrypted:	false
SSDEEP:	48:o7L7NMmtL3ADFNPcpOXAV7D74OpFqfW3X/rV+Y9rw:oNLwFVcpOXOJXcudhw
MD5:	4C66442B5D484EC334493800EF99A9BE
SHA1:	85301278BDCCE3ED0A4F455D2474969811C6D7A7
SHA-256:	8E507422B8D311344CBFB89C9673E15E86031A9AE5F99B2F9DA6C3EED12F56B4
SHA-512:	5C6D8295769B4A5477DA31A4F55C4896D3DB6E3F30D92B383A6266E3276592F8A07D0AEC3002AA45673E7437A2914BD6CEB8383BAFA7FBB22404C74740810FA9
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.zZ=function(a){_.X.call(this,a.Fa);this.window=a.Ea.window.get();this.Hc=a.Ea.Hc};_.K(_.zZ,_.X);_.zZ.Ba=function(){return{Ea:{window:_.Qu,Hc:_.yF}}};_.zZ.prototype.yp=function(){};_.zZ.prototype.addEncryptionRecoveryMethod=function(){};_.AZ=function(a){return(a==null?void 0:a.op)\|\|function(){}};_.BZ=function(a){return(a==null?void 0:a.f4)\|\|function(){}};_.NSb=function(a){return(a==null?void 0:a.oq)\|\|function(){}};._.OSb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.PSb=function(a){setTimeout(function(){throw a;},0)};_.zZ.prototype.fP=function(){return!0};_.zZ.prototype.aa=function(a,b,c){b=this.Hc;var d=b.bJ,e=new _.nF;a=_.mF(e,7,a);d.call(b,305,a,c,void 0)};_.Nu(_.Tn,_.zZ);._.l();._.k("ziXSP");.var TZ=function(a){_.zZ.call(

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	dropped
Size (bytes):	697087
Entropy (8bit):	5.598635112678657
Encrypted:	false
SSDEEP:	6144:Tfq3MngtoytLBhooIc/qttkPlqYbpSG2YKWinpxp4BGS3T3vJyNLZA9:TMugtVLvh+kxt2YKW2U9
MD5:	D3826A5CC52F48B01C237E819E5560D3
SHA1:	A261BE3EDDFA2499E3A80E0FDBC547F5615D4A04
SHA-256:	080886B0861A19AF74DE0570C6E976BF1FE77247CF8BD7635F32425B7E8F25BA
SHA-512:	5A4D8769E91F93255AE3AF8712E55807997336190E6D045D21F8F9ED51061D953A97C15E9352F227D71F6CD5665311E3AB42EBA90931A447091A438144B423B0
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	dropped
Size (bytes):	33446
Entropy (8bit):	5.39017273914164
Encrypted:	false
SSDEEP:	768:EhGGx5LfgRPng7Yt1w7XPrAMF3lt2BQRGRXfL1L6G9ik0iOM:msP1w4MF3ltdmP52CxOM
MD5:	EACCFEC9F28BA9C66496D915FBE3DC75
SHA1:	A767F848BCB5D0244AAE7B06D51C73ADA848719E
SHA-256:	B01E0133271B96426078F71005479D0248E1D8B201FA1F4246BEED8415CF7981
SHA-512:	96C0B6B29F0B681780FC8CA31DF938889D23F219F70C834DB953E6F88B969C6D17D688A83C999610CC53E3E9188F7011DFE29DEB8BD8669B7E95E6665D28A5D8
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Yua=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.qp("//www.google.com/images/cleardot.gif");_.Bp(c)}this.ka=c};_.h=Yua.prototype;_.h.Yc=null;_.h.g_=1E4;_.h.nB=!1;_.h.cR=0;_.h.sK=null;_.h.HV=null;_.h.setTimeout=function(a){this.g_=a};_.h.start=function(){if(this.nB)throw Error("hc");this.nB=!0;this.cR=0;Zua(this)};_.h.stop=function(){$ua(this);this.nB=!1};.var Zua=function(a){a.cR++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Im((0,_.gg)(a.LH,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.gg)(a.Eka,a),a.aa.onerror=(0,_.gg)(a.Dka,a),a.aa.onabort=(0,_.gg)(a.Cka,a),a.sK=_.Im(a.Fka,a.g_,a),a.aa.src=String(a.ka))};_.h=Yua.prototype;_.h.Eka=function(){this.LH(!0)};_.h.Dka=function(){this.LH(!1)};_.h.Cka=function(){this.LH(!1)};_.h.Fka=function(){this.LH(!1)};._.h.LH=function(a){$ua(this);a?(this.nB=!1,this.da.call(this.ea,!0)):this.cR<=0?Zua(this):(this.nB=!1,

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	dropped
Size (bytes):	3467
Entropy (8bit):	5.532497526299779
Encrypted:	false
SSDEEP:	96:oUvuxTBvdhUoGnHVPGjtwtaK8+0g/Ikhw:Hu5Bvdh8VJn0gxy
MD5:	3ED8C8DB9640906244F3E3D4572E5FC5
SHA1:	20E1A5F9D100820D3F5BA5BE64EC30BEACA759E0
SHA-256:	CDC1418D81D8BB2E5F6352531DDAE3D35F41E88D62BB16990F52D831DE6C98B2
SHA-512:	95AB6EEBDA369F61E9E5AD7A6C703101B8DA27AA420915D9A3A5631593DC4BF07B3EBB9F88FE30A4D6B7E68347A8A95CAC63157B9DDD6A87B94CA7742143C347
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var Jya=function(){var a=_.Le();return _.gk(a,1)},yu=function(a){this.Da=_.u(a,0,yu.messageId)};_.K(yu,_.w);yu.prototype.Ha=function(){return _.Sj(this,1)};yu.prototype.Ua=function(a){return _.rk(this,1,a)};yu.messageId="f.bo";var zu=function(){_.Fm.call(this)};_.K(zu,_.Fm);zu.prototype.zd=function(){this.sU=!1;Kya(this);_.Fm.prototype.zd.call(this)};zu.prototype.aa=function(){Lya(this);if(this.KD)return Mya(this),!1;if(!this.vW)return Au(this),!0;this.dispatchEvent("p");if(!this.oQ)return Au(this),!0;this.xN?(this.dispatchEvent("r"),Au(this)):Mya(this);return!1};.var Nya=function(a){var b=new _.qp(a.R5);a.fR!=null&&_.bo(b,"authuser",a.fR);return b},Mya=function(a){a.KD=!0;var b=Nya(a),c="rt=r&f_uid="+_.Qk(a.oQ);_.wn(b,(0,_.gg)(a.ea,a),"POST",c)};.zu.prototype.ea=function(a){a=a.target;Lya(this);if(_.zn(a)){this.WK=0;if(this.xN)this.KD=!1,this.dispatchEvent("r"

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	dropped
Size (bytes):	747743
Entropy (8bit):	5.791827390083392
Encrypted:	false
SSDEEP:	3072:CTwIHOQcksvLwFzy0ltT4vzq20cy2eWzKRncURgoSdwInhPaZSvLGjCfDx/ludbZ:CrLWUzy0lVP9nz10BodLLMdUAUGiTjN
MD5:	3A9A48D4BCBDE8D244B9F4F9E39951EF
SHA1:	BB7625E26262C3CCCE4BA0699D94AB48D050D121
SHA-256:	9E6FDC370CF2D15FF98E41CE885EB6B83E0D5C5B844AF7A8F8CF35F11089AC26
SHA-512:	7DD122157FCE668146834D3642D70AFBD370A8F1B6F602D0353C85174AEC408A5C89473B2A3F5A1222769FB79569B147B7211D6C7428D7585C3438723C17E5E3
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x11c60ce4, 0x2046d86, 0x1a784f88, 0x11406f40, 0x72102, 0x0, 0x0, 0x2000001b, 0x61e, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Qa,Ua,gaa,iaa,mb,qaa,waa,Caa,Kaa,Maa,Paa,Lb,Qaa,Rb,Tb,Ub,Raa,Saa,Vb,Taa,Uaa,Vaa,Zb,$aa,bba,hc,ic,jc,gba,hba,lba,nba,pba,qba,uba,xba,rba,wba,vba,tba,sba,yba,Cba,Gba,Hba,Eba,Ic,Jc,Kba,Mba,Rba,Sba,Tba,Uba,Vba,Wba,Pba,Qba,Yba,hd,aca,bca,dca,fca,eca,hca,ica,jca,kca,mca,lca,oca,pca,qca,r

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	downloaded
Size (bytes):	5050
Entropy (8bit):	5.3019521130781655
Encrypted:	false
SSDEEP:	96:oMMRpyvkMmrDbBargZEi/PggzLmwC8Vh11PGmtjGTsECOFpw:ip7MQE4Ei/PgIBjmmepR6
MD5:	56879DD8886F803593865378D078E00A
SHA1:	7225C36DEEFBDFB2386747582CF19D17C480B724
SHA-256:	113A7E4489B214342173C9A39D2D6ACF444E13D9B61C05649B1FA3A21EBE018B
SHA-512:	26969E03C7CC01C747DA3BB25ECF7C0B8F3A9AF863BC5FA5FC20F12F7A1608265122701DA115184DAF285B3112F24228CDFEFE0E834055CD201B79A71CEE9BA1
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEbgYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlENVF1wwyGcC3UcchLKdoB1ttzXUg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.aOa=_.z("wg1P6b",[_.DB,_.Vn,_.co]);._.k("wg1P6b");.var x7a;x7a=_.yh(["aria-"]);._.oK=function(a){_.Y.call(this,a.Fa);this.La=this.Aa=this.aa=this.viewportElement=this.Na=null;this.Kc=a.Ea.xf;this.ab=a.Ea.focus;this.Fc=a.Ea.Fc;this.ea=this.Ui();a=-1*parseInt(_.Ro(this.Ui().el(),"marginTop")\|\|"0",10);var b=parseInt(_.Ro(this.Ui().el(),"marginBottom")\|\|"0",10);this.Ta={top:a,right:0,bottom:b,left:0};a=_.hf(this.getData("isMenuDynamic"),!1);b=_.hf(this.getData("isMenuHoisted"),!1);this.Ga=a?1:b?2:0;this.ka=!1;this.Ca=1;this.Ga!==1&&(this.aa=this.Sa("U0exHf").children().Vc(0),_.Iu(this,.y7a(this,this.aa.el())));_.nG(this.wa())&&(a=this.wa().el(),b=this.De.bind(this),a.__soy_skip_handler=b)};_.K(_.oK,_.Y);_.oK.Ba=function(){return{Ea:{xf:_.UF,focus:_.FF,Fc:_.Ru}}};_.oK.prototype.pz=function(a){var b=a.source;this.Na=b;var c;((c=a.data)==null?0:c.kA)?(a=a.data.kA,this.Ca=a==="MOUS

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (395)
Category:	downloaded
Size (bytes):	1608
Entropy (8bit):	5.272260972196049
Encrypted:	false
SSDEEP:	48:o7dNGEF1HN/EJShSZuLpfMxISN+oP7D8bBrw:o1sSEZumJcRw
MD5:	0823F12FAB09559EE0684B4B6F6F9329
SHA1:	D2AC8628F2CA985373CF0B6E9A9409288C9F0A52
SHA-256:	5DEAF459D657397CFDE8AB99C38E196624A0F1CCC4873EAC7C427E95CA5AD0C9
SHA-512:	2035BCC69738F041366DA6F9E5CC744BBE3BF89E1E413FD526D53C29C32556668F65BF07760714C7DCF300557913D45E00F56BA2DAF472A6E1FA2327569C793D
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEbgYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlENVF1wwyGcC3UcchLKdoB1ttzXUg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,ZDZcre,A7fCU"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Cg(_.Yla);_.MA=function(a){_.X.call(this,a.Fa);this.aa=a.Xa.cache};_.K(_.MA,_.X);_.MA.Ba=function(){return{Xa:{cache:_.Ft}}};_.MA.prototype.execute=function(a){_.Db(a,function(b){var c;_.ef(b)&&(c=b.hb.jc(b.mb));c&&this.aa.tH(c)},this);return{}};_.Nu(_.dma,_.MA);._.l();._.k("ZDZcre");.var aI=function(a){_.X.call(this,a.Fa);this.Lm=a.Ea.Lm;this.Z4=a.Ea.metadata;this.aa=a.Ea.Rt};_.K(aI,_.X);aI.Ba=function(){return{Ea:{Lm:_.FH,metadata:_.v0a,Rt:_.CH}}};aI.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Db(a,function(c){var d=b.Z4.getType(c.Od())===2?b.Lm.Pb(c):b.Lm.fetch(c);return _.bm(c,_.GH)?d.then(function(e){return _.Id(e)}):d},this)};_.Nu(_.ima,aI);._.l();._.k("K5nYTd");._.u0a=new _.uf(_.ema);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var IH=function(a){_.X.call(this,a.Fa);this.aa=a.Ea.jR};_.K(IH,_.X);IH.Ba=func

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	downloaded
Size (bytes):	33446
Entropy (8bit):	5.39017273914164
Encrypted:	false
SSDEEP:	768:EhGGx5LfgRPng7Yt1w7XPrAMF3lt2BQRGRXfL1L6G9ik0iOM:msP1w4MF3ltdmP52CxOM
MD5:	EACCFEC9F28BA9C66496D915FBE3DC75
SHA1:	A767F848BCB5D0244AAE7B06D51C73ADA848719E
SHA-256:	B01E0133271B96426078F71005479D0248E1D8B201FA1F4246BEED8415CF7981
SHA-512:	96C0B6B29F0B681780FC8CA31DF938889D23F219F70C834DB953E6F88B969C6D17D688A83C999610CC53E3E9188F7011DFE29DEB8BD8669B7E95E6665D28A5D8
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEbgYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlENVF1wwyGcC3UcchLKdoB1ttzXUg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Yua=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.qp("//www.google.com/images/cleardot.gif");_.Bp(c)}this.ka=c};_.h=Yua.prototype;_.h.Yc=null;_.h.g_=1E4;_.h.nB=!1;_.h.cR=0;_.h.sK=null;_.h.HV=null;_.h.setTimeout=function(a){this.g_=a};_.h.start=function(){if(this.nB)throw Error("hc");this.nB=!0;this.cR=0;Zua(this)};_.h.stop=function(){$ua(this);this.nB=!1};.var Zua=function(a){a.cR++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Im((0,_.gg)(a.LH,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.gg)(a.Eka,a),a.aa.onerror=(0,_.gg)(a.Dka,a),a.aa.onabort=(0,_.gg)(a.Cka,a),a.sK=_.Im(a.Fka,a.g_,a),a.aa.src=String(a.ka))};_.h=Yua.prototype;_.h.Eka=function(){this.LH(!0)};_.h.Dka=function(){this.LH(!1)};_.h.Cka=function(){this.LH(!1)};_.h.Fka=function(){this.LH(!1)};._.h.LH=function(a){$ua(this);a?(this.nB=!1,this.da.call(this.ea,!0)):this.cR<=0?Zua(this):(this.nB=!1,

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (682)
Category:	downloaded
Size (bytes):	4068
Entropy (8bit):	5.352146509889801
Encrypted:	false
SSDEEP:	48:ve829NgX5wQZDX9Yl6NPcn5EwlIfXqHm4tWyc93tg5XZXGZXGWX3LqDYnysD27YZ:GFkNklIfAmmAYwt2Uny5A86CT9w
MD5:	E6AB948B09BC826B9AB84D04F7CEEB2C
SHA1:	C5E11654BB4E19F50396DBDAE9FC90C7DA732174
SHA-256:	273F792581B6E0A7616B57365618D7ABBD1346FCFFEFA2BEBB47E0522516D9CA
SHA-512:	CAEB0CEA164E954444ABB2B18872A6C48ED0D57018E153E2DBF51ABE49586EEEFFE6753DE0768DAE36039BCDC1F264D95B4C3EA82AB42B260121F5D46162329A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEbgYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlENVF1wwyGcC3UcchLKdoB1ttzXUg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe"
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Cg(_.sqa);._.k("sOXFj");.var Tu=function(a){_.X.call(this,a.Fa)};_.K(Tu,_.X);Tu.Ba=_.X.Ba;Tu.prototype.aa=function(a){return a()};_.Nu(_.rqa,Tu);._.l();._.k("oGtAuc");._.fza=new _.uf(_.sqa);._.l();._.k("q0xTif");.var aAa=function(a){var b=function(d){_.lo(d)&&(_.lo(d).Mc=null,_.dv(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},pv=function(a){_.Lt.call(this,a.Fa);this.Qa=this.dom=null;if(this.Ql()){var b=_.Wm(this.wh(),[_.bn,_.an]);b=_.zi([b[_.bn],b[_.an]]).then(function(c){this.Qa=c[0];this.dom=c[1]},null,this);_.Iu(this,b)}this.Ra=a.Om.Afa};_.K(pv,_.Lt);pv.Ba=function(){return{Om:{Afa:function(a){return _.Ze(a)}}}};pv.prototype.Tp=function(a){return this.Ra.Tp(a)};.pv.prototype.getData=function(a){return this.Ra.getData(a)};pv.prototype.Oo=function(){_.ku(this.d

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	dropped
Size (bytes):	1459
Entropy (8bit):	5.309536814830864
Encrypted:	false
SSDEEP:	24:kMYD7DObtudYqbYsNJ+YdJB/d+neNhz1iL0QhYn3M9Ih6u0hGbHEzGb0SFLM+OcK:o7DObg+5efNjqGhd0hGbkzGb0SC6Frw
MD5:	3B8C04E5267746EC50FAD82AC426FF50
SHA1:	E3EDD75E19D2568376F4B90CED3D47E4F9A1FD8C
SHA-256:	FE35087C88FB80E251F57E6FFA6EDDE9D70ED9C831B4439556230D8F6A0D9110
SHA-512:	21ECA120F86597859B0F046BEDAEFF56BC3DBDC87574221C9DE04F8F10BB4D589A9516632ED0CE9ECA4F737CDFF02C191C9FF31F1645592F3C4A503812941FF2
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.v0a=new _.uf(_.Xm);._.l();._.k("P6sQOc");.var A0a=!!(_.Uh[1]&1);var C0a=function(a,b,c,d,e){this.ea=a;this.Aa=b;this.ka=c;this.Ca=d;this.Ga=e;this.aa=0;this.da=B0a(this)},D0a=function(a){var b={};_.Oa(a.uT(),function(e){b[e]=!0});var c=a.nT(),d=a.pT();return new C0a(a.fQ(),c.aa()1E3,a.QS(),d.aa()1E3,b)},B0a=function(a){return Math.random()Math.min(a.AaMath.pow(a.ka,a.aa),a.Ca)},JH=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ga[b]:!0};var KH=function(a){_.X.call(this,a.Fa);this.da=a.Ea.nW;this.ea=a.Ea.metadata;a=a.Ea.Wha;this.fetch=a.fetch.bind(a)};_.K(KH,_.X);KH.Ba=function(){return{Ea:{nW:_.y0a,metadata:_.v0a,Wha:_.o0a}}};KH.prototype.aa=function(a,b){if(this.ea.getType(a.Od())!==1)return _.mn(a);var c=this.da.KV;return(c=c?D0a(c):null)&&JH(c)?_.dza(a,E0a(this,a,b,c)):_.mn(a)};.var E0a=function(a,b,c,d){return c.then(function(e){return e},function(e){

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.852645816977233
Encrypted:	false
SSDEEP:	3:DZFJu0+WVTBCq2xCKsJJuYHSKnZ:lFJuuVTBpnu4SKZ
MD5:	3D76DE7C583DA8ED6D1D5AB91239F88B
SHA1:	A0818EFD94EFC525EBF513EDE7CADE6D038DF57A
SHA-256:	E9FBC4E9A936269D7CC25B32C7910F3861CA3D3AE84907A34D613442E44A01E1
SHA-512:	0DA8AD357DFCEB655865C834BFAF7EABE3762DB13EF9BE681F2426540E767C8F3779D1E90D9DACB3040363F72A263DA9FA4F61EEA72C21DC07DED17488207504
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto
Preview:	Cj0KBw0ZARP6GgAKKQ3oIX6GGgQISxgCKhwIClIYCg5AIS4kI18qLSY/Ky8lLBABGP////8PCgcN05ioBxoA

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (468)
Category:	downloaded
Size (bytes):	1964
Entropy (8bit):	5.298383529084959
Encrypted:	false
SSDEEP:	48:o7L7NMmtL3ADFNPcpOXAV7D74OpFqfW3X/rV+Y9rw:oNLwFVcpOXOJXcudhw
MD5:	4C66442B5D484EC334493800EF99A9BE
SHA1:	85301278BDCCE3ED0A4F455D2474969811C6D7A7
SHA-256:	8E507422B8D311344CBFB89C9673E15E86031A9AE5F99B2F9DA6C3EED12F56B4
SHA-512:	5C6D8295769B4A5477DA31A4F55C4896D3DB6E3F30D92B383A6266E3276592F8A07D0AEC3002AA45673E7437A2914BD6CEB8383BAFA7FBB22404C74740810FA9
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEbgYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlENVF1wwyGcC3UcchLKdoB1ttzXUg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.zZ=function(a){_.X.call(this,a.Fa);this.window=a.Ea.window.get();this.Hc=a.Ea.Hc};_.K(_.zZ,_.X);_.zZ.Ba=function(){return{Ea:{window:_.Qu,Hc:_.yF}}};_.zZ.prototype.yp=function(){};_.zZ.prototype.addEncryptionRecoveryMethod=function(){};_.AZ=function(a){return(a==null?void 0:a.op)\|\|function(){}};_.BZ=function(a){return(a==null?void 0:a.f4)\|\|function(){}};_.NSb=function(a){return(a==null?void 0:a.oq)\|\|function(){}};._.OSb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.PSb=function(a){setTimeout(function(){throw a;},0)};_.zZ.prototype.fP=function(){return!0};_.zZ.prototype.aa=function(a,b,c){b=this.Hc;var d=b.bJ,e=new _.nF;a=_.mF(e,7,a);d.call(b,305,a,c,void 0)};_.Nu(_.Tn,_.zZ);._.l();._.k("ziXSP");.var TZ=function(a){_.zZ.call(

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	downloaded
Size (bytes):	1459
Entropy (8bit):	5.309536814830864
Encrypted:	false
SSDEEP:	24:kMYD7DObtudYqbYsNJ+YdJB/d+neNhz1iL0QhYn3M9Ih6u0hGbHEzGb0SFLM+OcK:o7DObg+5efNjqGhd0hGbkzGb0SC6Frw
MD5:	3B8C04E5267746EC50FAD82AC426FF50
SHA1:	E3EDD75E19D2568376F4B90CED3D47E4F9A1FD8C
SHA-256:	FE35087C88FB80E251F57E6FFA6EDDE9D70ED9C831B4439556230D8F6A0D9110
SHA-512:	21ECA120F86597859B0F046BEDAEFF56BC3DBDC87574221C9DE04F8F10BB4D589A9516632ED0CE9ECA4F737CDFF02C191C9FF31F1645592F3C4A503812941FF2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEbgYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlENVF1wwyGcC3UcchLKdoB1ttzXUg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=P6sQOc"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.v0a=new _.uf(_.Xm);._.l();._.k("P6sQOc");.var A0a=!!(_.Uh[1]&1);var C0a=function(a,b,c,d,e){this.ea=a;this.Aa=b;this.ka=c;this.Ca=d;this.Ga=e;this.aa=0;this.da=B0a(this)},D0a=function(a){var b={};_.Oa(a.uT(),function(e){b[e]=!0});var c=a.nT(),d=a.pT();return new C0a(a.fQ(),c.aa()1E3,a.QS(),d.aa()1E3,b)},B0a=function(a){return Math.random()Math.min(a.AaMath.pow(a.ka,a.aa),a.Ca)},JH=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ga[b]:!0};var KH=function(a){_.X.call(this,a.Fa);this.da=a.Ea.nW;this.ea=a.Ea.metadata;a=a.Ea.Wha;this.fetch=a.fetch.bind(a)};_.K(KH,_.X);KH.Ba=function(){return{Ea:{nW:_.y0a,metadata:_.v0a,Wha:_.o0a}}};KH.prototype.aa=function(a,b){if(this.ea.getType(a.Od())!==1)return _.mn(a);var c=this.da.KV;return(c=c?D0a(c):null)&&JH(c)?_.dza(a,E0a(this,a,b,c)):_.mn(a)};.var E0a=function(a,b,c,d){return c.then(function(e){return e},function(e){

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (682)
Category:	dropped
Size (bytes):	4068
Entropy (8bit):	5.352146509889801
Encrypted:	false
SSDEEP:	48:ve829NgX5wQZDX9Yl6NPcn5EwlIfXqHm4tWyc93tg5XZXGZXGWX3LqDYnysD27YZ:GFkNklIfAmmAYwt2Uny5A86CT9w
MD5:	E6AB948B09BC826B9AB84D04F7CEEB2C
SHA1:	C5E11654BB4E19F50396DBDAE9FC90C7DA732174
SHA-256:	273F792581B6E0A7616B57365618D7ABBD1346FCFFEFA2BEBB47E0522516D9CA
SHA-512:	CAEB0CEA164E954444ABB2B18872A6C48ED0D57018E153E2DBF51ABE49586EEEFFE6753DE0768DAE36039BCDC1F264D95B4C3EA82AB42B260121F5D46162329A
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Cg(_.sqa);._.k("sOXFj");.var Tu=function(a){_.X.call(this,a.Fa)};_.K(Tu,_.X);Tu.Ba=_.X.Ba;Tu.prototype.aa=function(a){return a()};_.Nu(_.rqa,Tu);._.l();._.k("oGtAuc");._.fza=new _.uf(_.sqa);._.l();._.k("q0xTif");.var aAa=function(a){var b=function(d){_.lo(d)&&(_.lo(d).Mc=null,_.dv(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},pv=function(a){_.Lt.call(this,a.Fa);this.Qa=this.dom=null;if(this.Ql()){var b=_.Wm(this.wh(),[_.bn,_.an]);b=_.zi([b[_.bn],b[_.an]]).then(function(c){this.Qa=c[0];this.dom=c[1]},null,this);_.Iu(this,b)}this.Ra=a.Om.Afa};_.K(pv,_.Lt);pv.Ba=function(){return{Om:{Afa:function(a){return _.Ze(a)}}}};pv.prototype.Tp=function(a){return this.Ra.Tp(a)};.pv.prototype.getData=function(a){return this.Ra.getData(a)};pv.prototype.Oo=function(){_.ku(this.d

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2907)
Category:	downloaded
Size (bytes):	23454
Entropy (8bit):	5.408812355529545
Encrypted:	false
SSDEEP:	384:iSrtcyJgla5dQl7CPYjffLQEu0S1EF5MdgROwv5jsg2EbPdNbdp/q1L9f:iSrtcyJc7CgjffcEdQddwBjl2EbVNbvA
MD5:	498084FE30B6F1F7E18A17EEEA8FFCC9
SHA1:	C084CE0DA02D4BE12672F562C9EC7B62D4E28153
SHA-256:	C1CE8A67AA6DD7D2073057EAAD29E03BCD02BE8D2F8B116242E26B5806630C49
SHA-512:	5FBA713495B184C9DA02E257536C57C4555BFC37F178146E74C413164ADBAB325346983E58FC3036E71E9EFCFA63844750FDBF476156D72FEF952CFF68FBB35F
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEbgYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlENVF1wwyGcC3UcchLKdoB1ttzXUg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Uu.prototype.da=_.ca(41,function(){return _.Hj(this,3)});_.Fz=function(a,b){this.key=a;this.defaultValue=!1;this.flagName=b;this.flagNameForDebugging=void 0};_.Fz.prototype.ctor=function(a){return typeof a==="boolean"?a:this.defaultValue};_.Gz=function(){this.ka=!0;var a=_.Mj(_.zk(_.Ge("TSDtV",window),_.gza),_.Uu,1,_.Gj())[0];if(a){var b={};for(var c=_.n(_.Mj(a,_.hza,2,_.Gj())),d=c.next();!d.done;d=c.next()){var e=d.value;d=_.dk(e,1).toString();switch(_.Jj(e,_.Vu)){case 3:b[d]=_.bk(e,_.Aj(e,_.Vu,3));break;case 2:b[d]=_.dk(e,_.Aj(e,_.Vu,2));break;case 4:b[d]=_.fk(e,_.Aj(e,_.Vu,4));break;case 5:b[d]=_.kk(e,5,_.Vu);break;case 6:b[d]=_.lk(e,_.mf,6,_.Vu);break;case 8:e=_.Lj(e,_.iza,8,_.Vu);switch(_.Jj(e,_.Wu)){case 1:b[d]=_.kk(e,1,_.Wu);.break;default:throw Error("od`"+_.Jj(e,_.Wu));}break;default:throw Error("od`"+_.Jj(e,_.Vu));}}}else b={};this.ea=b;this.token=a?a.da():null};_

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	9211
Entropy (8bit):	5.40130909479059
Encrypted:	false
SSDEEP:	192:DYUqtMklctN8yZZqZQGege1BQHSK1tj9e:DY9Mklq9HqXECZ1tj9e
MD5:	DE6205714FB6FC5CB852B61E299CC119
SHA1:	7D4FB91D961EAF952EE08661D674E142327A56E5
SHA-256:	0C0020D68375603F7A0A7EE1AA5CB49708D0DEA473BE26D91A4CFFFE2F671E08
SHA-512:	388068F1927CEEDEFDBCB86718DF15FBBD32770A34F1DD907A7E365DD3632333522CBD6BA4F14DFA1972F7CC5091ED103F9B1964B76264C7B4CCB35C2CFA19C4
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEbgYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=AvtSve,CMcBD,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,cYShmd,eVCnO,hc6Ubd,inNHtf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,qPfo0c,qmdT9,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlENVF1wwyGcC3UcchLKdoB1ttzXUg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.sOa=_.z("SD8Jgb",[]);._.oX=function(a,b){if(typeof b==="string")a.Lc(b);else if(b instanceof _.Sp&&b.ia&&b.ia===_.C)b=_.$a(b.qv()),a.empty().append(b);else if(b instanceof _.Va)b=_.$a(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("Xf");};_.pX=function(a){var b=_.Xo(a,"[jsslot]");if(b.size()>0)return b;b=new _.Vo([_.pl("span")]);_.Yo(b,"jsslot","");a.empty().append(b);return b};_.YOb=function(a){return a===null\|\|typeof a==="string"&&_.Vi(a)};._.k("SD8Jgb");._.yX=function(a){_.Y.call(this,a.Fa);this.Va=a.controller.Va;this.jd=a.controllers.jd[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.wa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.yX,_.Y);_.yX.Ba=function(){return{controller:{Va:{jsname:"n7vHCb",ctor:_.Qv},header:{jsname:"tJHJj",ctor:_.Qv},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	downloaded
Size (bytes):	3131
Entropy (8bit):	5.415855705012616
Encrypted:	false
SSDEEP:	48:o7sNi+ANA3yPwR5jNQ8jse8sw5oO/A3NPA3SjpG6LEzX9TW5BnXkMQJIPlLt1lL8:ogHyY5jOTjT2ltvLKNinSJQttw
MD5:	AE39AA2753F5BE40292E997B553AB30F
SHA1:	036CB8D65465045CC0EBD597F7664CF088C3F0C6
SHA-256:	DE82B874D2ECB868246E96494BF4C373618C25A5E04E4FF33B39B2CA8E2D29D6
SHA-512:	BCC4825891B1760F9104D937E4E7FF86EE42D3D89342AF08D70D4E86E9B15A89CCCE5B70C89D684090318C1CA3F8007BA8FE657CA131164DB0B2511CC71007A0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEbgYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlENVF1wwyGcC3UcchLKdoB1ttzXUg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var OA=function(a){_.X.call(this,a.Fa)};_.K(OA,_.X);OA.Ba=_.X.Ba;OA.prototype.dT=function(a){return _.cf(this,{Xa:{bU:_.Pl}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.xi(function(e){window._wjdc=function(f){d(f);e(NKa(f,b,a))}}):NKa(c,b,a)})};var NKa=function(a,b,c){return(a=a&&a[c])?a:b.Xa.bU.dT(c)};.OA.prototype.aa=function(a,b){var c=_.Ura(b).zk;if(c.startsWith("$")){var d=_.Em.get(a);_.Fq[b]&&(d\|\|(d={},_.Em.set(a,d)),d[c]=_.Fq[b],delete _.Fq[b],_.Gq--);if(d)if(a=d[c])b=_.ff(a);else throw Error("Jb`"+b);else b=null}else b=null;return b};_.Nu(_.Vfa,OA);._.l();._.k("SNUn3");._.MKa=new _.uf(_.Dg);._.l();._.k("RMhBfe");.var OKa=function(a){var b=_.Eq(a);return b?new _.xi(function(c,d){var e=function(){b=_.Eq(a);var f=_.bga(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	dropped
Size (bytes):	9211
Entropy (8bit):	5.40130909479059
Encrypted:	false
SSDEEP:	192:DYUqtMklctN8yZZqZQGege1BQHSK1tj9e:DY9Mklq9HqXECZ1tj9e
MD5:	DE6205714FB6FC5CB852B61E299CC119
SHA1:	7D4FB91D961EAF952EE08661D674E142327A56E5
SHA-256:	0C0020D68375603F7A0A7EE1AA5CB49708D0DEA473BE26D91A4CFFFE2F671E08
SHA-512:	388068F1927CEEDEFDBCB86718DF15FBBD32770A34F1DD907A7E365DD3632333522CBD6BA4F14DFA1972F7CC5091ED103F9B1964B76264C7B4CCB35C2CFA19C4
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.sOa=_.z("SD8Jgb",[]);._.oX=function(a,b){if(typeof b==="string")a.Lc(b);else if(b instanceof _.Sp&&b.ia&&b.ia===_.C)b=_.$a(b.qv()),a.empty().append(b);else if(b instanceof _.Va)b=_.$a(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("Xf");};_.pX=function(a){var b=_.Xo(a,"[jsslot]");if(b.size()>0)return b;b=new _.Vo([_.pl("span")]);_.Yo(b,"jsslot","");a.empty().append(b);return b};_.YOb=function(a){return a===null\|\|typeof a==="string"&&_.Vi(a)};._.k("SD8Jgb");._.yX=function(a){_.Y.call(this,a.Fa);this.Va=a.controller.Va;this.jd=a.controllers.jd[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.wa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.yX,_.Y);_.yX.Ba=function(){return{controller:{Va:{jsname:"n7vHCb",ctor:_.Qv},header:{jsname:"tJHJj",ctor:_.Qv},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2907)
Category:	dropped
Size (bytes):	23454
Entropy (8bit):	5.408812355529545
Encrypted:	false
SSDEEP:	384:iSrtcyJgla5dQl7CPYjffLQEu0S1EF5MdgROwv5jsg2EbPdNbdp/q1L9f:iSrtcyJc7CgjffcEdQddwBjl2EbVNbvA
MD5:	498084FE30B6F1F7E18A17EEEA8FFCC9
SHA1:	C084CE0DA02D4BE12672F562C9EC7B62D4E28153
SHA-256:	C1CE8A67AA6DD7D2073057EAAD29E03BCD02BE8D2F8B116242E26B5806630C49
SHA-512:	5FBA713495B184C9DA02E257536C57C4555BFC37F178146E74C413164ADBAB325346983E58FC3036E71E9EFCFA63844750FDBF476156D72FEF952CFF68FBB35F
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Uu.prototype.da=_.ca(41,function(){return _.Hj(this,3)});_.Fz=function(a,b){this.key=a;this.defaultValue=!1;this.flagName=b;this.flagNameForDebugging=void 0};_.Fz.prototype.ctor=function(a){return typeof a==="boolean"?a:this.defaultValue};_.Gz=function(){this.ka=!0;var a=_.Mj(_.zk(_.Ge("TSDtV",window),_.gza),_.Uu,1,_.Gj())[0];if(a){var b={};for(var c=_.n(_.Mj(a,_.hza,2,_.Gj())),d=c.next();!d.done;d=c.next()){var e=d.value;d=_.dk(e,1).toString();switch(_.Jj(e,_.Vu)){case 3:b[d]=_.bk(e,_.Aj(e,_.Vu,3));break;case 2:b[d]=_.dk(e,_.Aj(e,_.Vu,2));break;case 4:b[d]=_.fk(e,_.Aj(e,_.Vu,4));break;case 5:b[d]=_.kk(e,5,_.Vu);break;case 6:b[d]=_.lk(e,_.mf,6,_.Vu);break;case 8:e=_.Lj(e,_.iza,8,_.Vu);switch(_.Jj(e,_.Wu)){case 1:b[d]=_.kk(e,1,_.Wu);.break;default:throw Error("od`"+_.Jj(e,_.Wu));}break;default:throw Error("od`"+_.Jj(e,_.Vu));}}}else b={};this.ea=b;this.token=a?a.da():null};_

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 01:30:09.827341080 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 24, 2024 01:30:13.162493944 CEST	49735	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:13.162576914 CEST	443	49735	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:13.162648916 CEST	49736	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:13.162730932 CEST	443	49736	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:13.162872076 CEST	49736	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:13.162938118 CEST	49735	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:13.169735909 CEST	49736	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:13.169815063 CEST	443	49736	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:13.169871092 CEST	49735	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:13.169951916 CEST	443	49735	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.024799109 CEST	443	49735	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.025305986 CEST	49735	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:14.025367975 CEST	443	49735	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.026657104 CEST	443	49735	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.026849031 CEST	49735	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:14.028155088 CEST	443	49736	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.028428078 CEST	49736	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:14.028490067 CEST	443	49736	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.029222965 CEST	443	49735	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.029309988 CEST	49735	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:14.029736042 CEST	443	49736	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.029818058 CEST	49736	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:14.030229092 CEST	49735	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:14.030462027 CEST	443	49735	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.030474901 CEST	49735	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:14.032248974 CEST	443	49736	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.032320023 CEST	49736	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:14.032646894 CEST	49736	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:14.032743931 CEST	443	49736	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.071412086 CEST	443	49735	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.079200983 CEST	49735	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:14.079238892 CEST	49736	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:14.079260111 CEST	443	49735	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.079298973 CEST	443	49736	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.125545025 CEST	49735	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:14.125577927 CEST	49736	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:14.407948971 CEST	443	49735	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.407979012 CEST	443	49735	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.408138037 CEST	49735	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:14.408200979 CEST	443	49735	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.408268929 CEST	49735	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:14.409138918 CEST	49735	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:14.409259081 CEST	443	49735	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:14.409326077 CEST	49735	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:15.355957985 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:15.356040955 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:15.356146097 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:15.356381893 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:15.356422901 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:15.839381933 CEST	30100	63486	192.168.2.1	192.168.2.4
Oct 24, 2024 01:30:15.841365099 CEST	63486	30100	192.168.2.4	192.168.2.1
Oct 24, 2024 01:30:16.131448984 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:16.131509066 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:16.135164022 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:16.136888981 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:16.136905909 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:16.227907896 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:16.228307009 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:16.228367090 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:16.229944944 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:16.230127096 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:16.231195927 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:16.231342077 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:16.272491932 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:16.272552013 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:16.319552898 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:16.986968040 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:16.987036943 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:16.990732908 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:16.990751028 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:16.991175890 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:17.031004906 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:17.052998066 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:17.095374107 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:17.294372082 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:17.294564009 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:17.294565916 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:17.294565916 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:17.294632912 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:17.294900894 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:17.294923067 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:17.331343889 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:17.331427097 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:17.331603050 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:17.331921101 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:17.332000971 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:18.190761089 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:18.191374063 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:18.195247889 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:18.195300102 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:18.195909977 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:18.198615074 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:18.243364096 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:18.442645073 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:18.442811012 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:18.443017006 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:18.541475058 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:18.541476011 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:30:18.541541100 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:18.541580915 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:30:22.288290977 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 24, 2024 01:30:22.288343906 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 24, 2024 01:30:22.288686037 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 24, 2024 01:30:22.288692951 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 24, 2024 01:30:26.227082968 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:26.227227926 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:26.227333069 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:26.291254044 CEST	49740	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:26.291336060 CEST	443	49740	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:28.689424992 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 24, 2024 01:30:28.695005894 CEST	80	49723	199.232.210.172	192.168.2.4
Oct 24, 2024 01:30:28.695122004 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 24, 2024 01:30:28.952301979 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:28.952383041 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:28.952543974 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:28.956299067 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:28.956335068 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:29.805665970 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:29.807183027 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:29.807199001 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:29.807765961 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:29.807830095 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:29.808784962 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:29.808849096 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:29.810534954 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:29.810626030 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:29.810755014 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:29.810775995 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:29.859355927 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.108867884 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.108999014 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.109126091 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.109204054 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.109204054 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.109272003 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.117048979 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.117269993 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.117331028 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.126072884 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.126142979 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.126292944 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.126358986 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.126415014 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.225178003 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.225256920 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.225409985 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.225579977 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.225637913 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.225723028 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.227610111 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.227689981 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.233928919 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.233989000 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.242913961 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.242966890 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.242985964 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.243046045 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.243105888 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.342262983 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.342327118 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.342340946 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.342387915 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.342446089 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.344769001 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.344820976 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.344822884 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.344841957 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.344902992 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.350878000 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.395658970 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.395853043 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.399636984 CEST	49781	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:30.399719000 CEST	443	49781	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:30.399791956 CEST	49776	443	192.168.2.4	142.250.186.46
Oct 24, 2024 01:30:30.399820089 CEST	49781	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:30.399852991 CEST	443	49776	142.250.186.46	192.168.2.4
Oct 24, 2024 01:30:30.402280092 CEST	49781	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:30.402364016 CEST	443	49781	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:30.476861954 CEST	49782	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:30.476905107 CEST	443	49782	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:30.476984978 CEST	49782	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:30.490087032 CEST	49782	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:30.490104914 CEST	443	49782	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.270620108 CEST	443	49781	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.270849943 CEST	49781	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.270881891 CEST	443	49781	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.271409035 CEST	443	49781	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.271496058 CEST	49781	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.272407055 CEST	443	49781	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.272476912 CEST	49781	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.273420095 CEST	49781	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.273420095 CEST	49781	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.273525000 CEST	443	49781	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.314372063 CEST	49781	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.314402103 CEST	443	49781	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.352166891 CEST	443	49782	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.352596998 CEST	49782	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.352617025 CEST	443	49782	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.353163958 CEST	443	49782	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.353282928 CEST	49782	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.354228973 CEST	443	49782	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.354501009 CEST	49782	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.354501009 CEST	49782	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.354501009 CEST	49782	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.354516983 CEST	443	49782	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.354581118 CEST	443	49782	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.358335972 CEST	49781	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.398781061 CEST	49782	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.398792982 CEST	443	49782	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.445374966 CEST	49782	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.548163891 CEST	443	49781	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.549453020 CEST	49781	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.549460888 CEST	49787	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.549540043 CEST	443	49787	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.549572945 CEST	443	49781	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.549810886 CEST	49781	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.549813986 CEST	49787	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.550021887 CEST	49787	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.550059080 CEST	443	49787	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.635405064 CEST	443	49782	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.636487007 CEST	49788	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.636523008 CEST	443	49788	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.636543036 CEST	49782	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.636614084 CEST	443	49782	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:31.636704922 CEST	49788	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.636710882 CEST	49782	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.636925936 CEST	49788	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:31.636939049 CEST	443	49788	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:32.408957958 CEST	443	49787	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:32.449661970 CEST	49787	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:32.486655951 CEST	443	49788	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:32.531871080 CEST	49788	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:32.685717106 CEST	49787	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:32.685791969 CEST	443	49787	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:32.686160088 CEST	49788	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:32.686170101 CEST	443	49788	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:32.687269926 CEST	443	49787	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:32.687382936 CEST	49787	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:32.687645912 CEST	443	49788	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:32.687714100 CEST	49788	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:32.690040112 CEST	443	49787	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:32.690130949 CEST	443	49788	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:32.690172911 CEST	49787	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:32.690180063 CEST	49788	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:32.690407038 CEST	49787	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:32.690604925 CEST	443	49787	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:32.690892935 CEST	49788	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:32.690978050 CEST	443	49788	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:32.693109035 CEST	49787	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:32.693142891 CEST	443	49787	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:32.693183899 CEST	49787	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:32.693540096 CEST	49788	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:32.693547010 CEST	443	49788	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:32.693559885 CEST	49788	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:32.734040976 CEST	49788	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:32.734052896 CEST	443	49788	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:32.734214067 CEST	49787	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:32.734293938 CEST	443	49787	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:32.999460936 CEST	443	49787	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:33.001558065 CEST	443	49788	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:33.009295940 CEST	49792	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:33.009344101 CEST	443	49792	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:33.009407043 CEST	49792	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:33.009843111 CEST	49792	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:33.009865999 CEST	443	49792	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:33.046034098 CEST	49788	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:33.046041965 CEST	443	49788	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:33.046051979 CEST	49787	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:33.046112061 CEST	443	49787	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:33.052133083 CEST	49787	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:33.052386045 CEST	443	49787	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:33.052566051 CEST	49787	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:33.055295944 CEST	49788	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:33.055464983 CEST	443	49788	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:33.055529118 CEST	49788	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:33.895020008 CEST	443	49792	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:33.895442009 CEST	49792	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:33.895505905 CEST	443	49792	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:33.896612883 CEST	443	49792	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:33.897337914 CEST	49792	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:33.897524118 CEST	443	49792	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:33.897644043 CEST	49792	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:33.937094927 CEST	49792	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:33.937155008 CEST	443	49792	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:34.167936087 CEST	443	49792	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:34.168034077 CEST	443	49792	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:34.168092966 CEST	49792	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:34.168107033 CEST	443	49792	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:34.168158054 CEST	443	49792	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:34.168214083 CEST	49792	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:34.168232918 CEST	443	49792	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:34.210150957 CEST	49792	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:34.210211992 CEST	443	49792	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:34.211335897 CEST	49792	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:34.211458921 CEST	443	49792	142.250.186.164	192.168.2.4
Oct 24, 2024 01:30:34.211520910 CEST	49792	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:30:34.258389950 CEST	49795	443	192.168.2.4	142.250.186.36
Oct 24, 2024 01:30:34.258433104 CEST	443	49795	142.250.186.36	192.168.2.4
Oct 24, 2024 01:30:34.258616924 CEST	49795	443	192.168.2.4	142.250.186.36
Oct 24, 2024 01:30:34.259522915 CEST	49795	443	192.168.2.4	142.250.186.36
Oct 24, 2024 01:30:34.259543896 CEST	443	49795	142.250.186.36	192.168.2.4
Oct 24, 2024 01:30:35.123169899 CEST	443	49795	142.250.186.36	192.168.2.4
Oct 24, 2024 01:30:35.137538910 CEST	49795	443	192.168.2.4	142.250.186.36
Oct 24, 2024 01:30:35.137572050 CEST	443	49795	142.250.186.36	192.168.2.4
Oct 24, 2024 01:30:35.139046907 CEST	443	49795	142.250.186.36	192.168.2.4
Oct 24, 2024 01:30:35.139112949 CEST	49795	443	192.168.2.4	142.250.186.36
Oct 24, 2024 01:30:35.149375916 CEST	49795	443	192.168.2.4	142.250.186.36
Oct 24, 2024 01:30:35.149579048 CEST	443	49795	142.250.186.36	192.168.2.4
Oct 24, 2024 01:30:35.151057959 CEST	49795	443	192.168.2.4	142.250.186.36
Oct 24, 2024 01:30:35.151084900 CEST	443	49795	142.250.186.36	192.168.2.4
Oct 24, 2024 01:30:35.201936960 CEST	49795	443	192.168.2.4	142.250.186.36
Oct 24, 2024 01:30:35.398128986 CEST	443	49795	142.250.186.36	192.168.2.4
Oct 24, 2024 01:30:35.398257971 CEST	443	49795	142.250.186.36	192.168.2.4
Oct 24, 2024 01:30:35.398350000 CEST	443	49795	142.250.186.36	192.168.2.4
Oct 24, 2024 01:30:35.398422003 CEST	49795	443	192.168.2.4	142.250.186.36
Oct 24, 2024 01:30:35.398458004 CEST	443	49795	142.250.186.36	192.168.2.4
Oct 24, 2024 01:30:35.398545980 CEST	443	49795	142.250.186.36	192.168.2.4
Oct 24, 2024 01:30:35.398665905 CEST	49795	443	192.168.2.4	142.250.186.36
Oct 24, 2024 01:30:35.398698092 CEST	443	49795	142.250.186.36	192.168.2.4
Oct 24, 2024 01:30:35.398912907 CEST	49795	443	192.168.2.4	142.250.186.36
Oct 24, 2024 01:30:35.406605005 CEST	49795	443	192.168.2.4	142.250.186.36
Oct 24, 2024 01:30:35.406688929 CEST	443	49795	142.250.186.36	192.168.2.4
Oct 24, 2024 01:30:35.406857014 CEST	49795	443	192.168.2.4	142.250.186.36
Oct 24, 2024 01:30:37.658407927 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:37.658456087 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:37.658519030 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:37.658878088 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:37.658900023 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:38.545861006 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:38.546169996 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:38.546205044 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:38.547476053 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:38.547576904 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:38.549952030 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:38.550064087 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:38.550309896 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:38.550311089 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:38.550311089 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:38.550349951 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:38.550513983 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:38.598733902 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:38.598756075 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:38.644351006 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:38.845074892 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:38.888588905 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:38.888631105 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:38.889298916 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:38.889435053 CEST	443	49797	142.250.185.110	192.168.2.4
Oct 24, 2024 01:30:38.889585972 CEST	49797	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:59.095211029 CEST	49736	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:30:59.095268011 CEST	443	49736	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:01.002150059 CEST	49799	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:01.002238989 CEST	443	49799	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:01.002552986 CEST	49799	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:01.002669096 CEST	49799	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:01.002700090 CEST	443	49799	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:01.772285938 CEST	49800	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:01.772355080 CEST	443	49800	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:01.772419930 CEST	49800	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:01.772614956 CEST	49800	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:01.772624016 CEST	443	49800	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:01.875473022 CEST	443	49799	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:01.875833035 CEST	49799	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:01.875896931 CEST	443	49799	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:01.877167940 CEST	443	49799	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:01.877249002 CEST	49799	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:01.879692078 CEST	443	49799	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:01.879774094 CEST	49799	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:01.879952908 CEST	49799	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:01.880105019 CEST	49799	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:01.880105019 CEST	49799	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:01.880120993 CEST	443	49799	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:01.880146027 CEST	443	49799	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:01.920819044 CEST	49799	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:01.920852900 CEST	443	49799	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:01.967139006 CEST	49799	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:02.165631056 CEST	443	49799	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:02.209606886 CEST	49799	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:02.209671974 CEST	443	49799	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:02.210088015 CEST	49799	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:02.210244894 CEST	443	49799	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:02.210465908 CEST	49799	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:02.631412983 CEST	443	49800	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:02.633450031 CEST	49800	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:02.633514881 CEST	443	49800	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:02.634047031 CEST	443	49800	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:02.634449005 CEST	49800	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:02.634577036 CEST	49800	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:02.634577036 CEST	49800	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:02.634593964 CEST	443	49800	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:02.634721041 CEST	443	49800	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:02.686331987 CEST	49800	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:02.917005062 CEST	443	49800	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:02.966583014 CEST	49800	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:02.966618061 CEST	443	49800	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:02.967051029 CEST	49800	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:02.967421055 CEST	443	49800	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:02.967710972 CEST	49800	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:04.655560970 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:04.655648947 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:04.655817986 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:04.655997992 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:04.656018972 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:05.460062027 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:05.460222006 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:05.461642981 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:05.461697102 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:05.462222099 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:05.469861984 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:05.515326977 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:05.720410109 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:05.720475912 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:05.720520973 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:05.720540047 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:05.720604897 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:05.720647097 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:05.720666885 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:05.839272022 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:05.839365005 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:05.839373112 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:05.839410067 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:05.839436054 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:05.839467049 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:05.961042881 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:05.961102962 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:05.961139917 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:05.961199999 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:05.961236954 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:05.961260080 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.078037977 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.078115940 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.078121901 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.078155041 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.078176975 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.078217030 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.197037935 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.197058916 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.197158098 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.197159052 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.197221994 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.197300911 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.316072941 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.316114902 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.316236019 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.316236973 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.316301107 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.316365004 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.436379910 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.436429977 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.436547995 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.436616898 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.436659098 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.436949968 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.553636074 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.553680897 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.553811073 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.553811073 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.553879976 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.554205894 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.593251944 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.593274117 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.593676090 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.593738079 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.593888044 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.711786032 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.711833954 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.711879015 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.711940050 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.711983919 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.712076902 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.791696072 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.791714907 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.791878939 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.791878939 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.791943073 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.792244911 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.909967899 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.909987926 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.910135984 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.910135984 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.910201073 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.910589933 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.950846910 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.950890064 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.950931072 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.950990915 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:06.951033115 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:06.951100111 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.029010057 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.029119968 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.029150009 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.029536009 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.029562950 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.029594898 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.029604912 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.030133963 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.030138969 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.075680017 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.075778961 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.076632977 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.078754902 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.078792095 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.080697060 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.080701113 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.080724001 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.080739975 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.080811024 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.080816031 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.080987930 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.081001043 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.081706047 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.081706047 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.081721067 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.081743956 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.082689047 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.082741022 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.082777023 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.083003998 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.083017111 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.083059072 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.083213091 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.083237886 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.801472902 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.819716930 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.825448036 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.826565027 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.832618952 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.844209909 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.860243082 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.871947050 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.871974945 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.872359037 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.872364998 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.872652054 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.872694016 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.872960091 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.872967005 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.873183012 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.873213053 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.873922110 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.873939037 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.874150991 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.874161005 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.874499083 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.874509096 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.874761105 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.874777079 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:07.875046015 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:07.875051022 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.992963076 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993022919 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993096113 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.993103027 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993103981 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993160009 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993165970 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993196011 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993236065 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.993258953 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993264914 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.993266106 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.993274927 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993283987 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993304968 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993347883 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.993347883 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993350983 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.993350983 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.993367910 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.993383884 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993407965 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993434906 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.993449926 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993526936 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993566036 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993587017 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.993607044 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.993716002 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.993716002 CEST	49807	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.993738890 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.993751049 CEST	443	49807	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.994102955 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.994116068 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.994149923 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.994163036 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.994853973 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.994860888 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.994956970 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.994963884 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.995204926 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.995245934 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.995280981 CEST	49808	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.995296955 CEST	443	49808	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.997201920 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.997236013 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.997261047 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.997304916 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.997314930 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.997356892 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.997471094 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.997489929 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.998405933 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.998414040 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.998459101 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.998492002 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.998495102 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.998631954 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.998641968 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.999183893 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.999205112 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.999279976 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.999286890 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.999346018 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.999366045 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.999383926 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:08.999397039 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.999548912 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:08.999577045 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.730643988 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.731009960 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.731210947 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.731229067 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.732055902 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.732062101 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.732520103 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.732531071 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.735371113 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.735374928 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.750876904 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.754668951 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.773627996 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.773730993 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.773895979 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.773932934 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.774561882 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.774568081 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.775362015 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.775374889 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.859843969 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.860038996 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.860127926 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.860181093 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.860305071 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.860357046 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.860882044 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.860899925 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.860907078 CEST	49811	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.860912085 CEST	443	49811	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.862222910 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.862226963 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.862237930 CEST	49809	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.862241030 CEST	443	49809	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.866539955 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.866570950 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.866630077 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.867557049 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.867625952 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.867708921 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.867794991 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.867810965 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.868211031 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.868240118 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.900913000 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.901077986 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.901143074 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.901233912 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.901256084 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.901257038 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.901281118 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.901303053 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.901400089 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.901454926 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.902898073 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.902910948 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.902939081 CEST	49812	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.902947903 CEST	443	49812	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.906449080 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.906490088 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.906569958 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.907054901 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.907072067 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.908360004 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.908399105 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:09.908459902 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.908665895 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:09.908679962 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.601237059 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.601794958 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.601881027 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.602092028 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.602106094 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.605005980 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.605458975 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.605504036 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.605675936 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.605684996 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.606690884 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.606990099 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.607042074 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.607435942 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.607449055 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.642899990 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.643183947 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.643212080 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.643548012 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.643553972 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.660547018 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.660943985 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.660984039 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.661170959 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.661178112 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.731265068 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.731450081 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.731553078 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.731554031 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.731554031 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.734193087 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.734237909 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.734311104 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.734427929 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.734436989 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.736367941 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.736452103 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.736598969 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.736643076 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.736660004 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.736696005 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.736726046 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.736726046 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.736748934 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.736763000 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.736768961 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.736802101 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.736826897 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.736840963 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.738910913 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.738950968 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.739006042 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.739110947 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.739118099 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.739372969 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.739454985 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.739665031 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.739665031 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.739742041 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.773853064 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.774005890 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.774058104 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.774211884 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.774223089 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.774233103 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.774236917 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.779880047 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.779959917 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.780049086 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.780164957 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.780188084 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.791807890 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.792289019 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.792350054 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.792396069 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.792396069 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.792413950 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.792426109 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.794522047 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.794600964 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:10.794677019 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.794812918 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:10.794852018 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.032567024 CEST	49810	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.032627106 CEST	443	49810	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.363192081 CEST	49824	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:11.363293886 CEST	443	49824	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:11.363492966 CEST	49824	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:11.364366055 CEST	49824	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:11.364403009 CEST	443	49824	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:11.471978903 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.473293066 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.473293066 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.473331928 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.473351955 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.478199959 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.478705883 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.478765011 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.479268074 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.479281902 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.480031967 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.480931044 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.480957031 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.481097937 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.481103897 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.514687061 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.515825987 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.515909910 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.516592979 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.516608000 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.546749115 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.547339916 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.547405005 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.548374891 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.548388958 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.606981993 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.607193947 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.607201099 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.607351065 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.607494116 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.607670069 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.608151913 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.608170986 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.608356953 CEST	49818	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.608364105 CEST	443	49818	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.609750032 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.609787941 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.609847069 CEST	49820	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.609863043 CEST	443	49820	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.613708019 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.613789082 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.613823891 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.613918066 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.614037991 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.614042044 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.614223957 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.614234924 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.614234924 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.614268064 CEST	49819	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.614272118 CEST	443	49819	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.614314079 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.614434958 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.615999937 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.616033077 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.616041899 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.616056919 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.620621920 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.620630026 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.620826006 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.620826006 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.620843887 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.645306110 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.645453930 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.645637035 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.645690918 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.645690918 CEST	49821	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.645723104 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.645744085 CEST	443	49821	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.648542881 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.648622990 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.648824930 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.648824930 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.648899078 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.679160118 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.679454088 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.680324078 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.680324078 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.680439949 CEST	49822	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.680447102 CEST	443	49822	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.684365034 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.684452057 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:11.684660912 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.684660912 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:11.684740067 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.229094028 CEST	443	49824	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:12.229854107 CEST	49824	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:12.229876041 CEST	443	49824	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:12.231103897 CEST	443	49824	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:12.231447935 CEST	49824	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:12.232254982 CEST	443	49824	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:12.232492924 CEST	49824	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:12.233026981 CEST	49824	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:12.233026981 CEST	49824	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:12.233059883 CEST	443	49824	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:12.233098984 CEST	49824	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:12.233128071 CEST	443	49824	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:12.284733057 CEST	49824	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:12.284749985 CEST	443	49824	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:12.328474045 CEST	49824	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:12.346430063 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.352309942 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.358753920 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.365351915 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.365427017 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.370845079 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.370858908 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.386693954 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.386707067 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.393599987 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.393887997 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.395153046 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.395158052 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.395948887 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.396024942 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.397288084 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.397301912 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.397511959 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.397516012 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.398395061 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.398399115 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.422462940 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.429616928 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.429678917 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.430313110 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.430329084 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.495371103 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.495578051 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.495644093 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.518457890 CEST	443	49824	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:12.521615028 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.521775961 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.521830082 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.523304939 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.523304939 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.523386002 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.523417950 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.524492979 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.524518013 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.524647951 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.524694920 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.524836063 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.524888039 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.530639887 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.530654907 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.530682087 CEST	49825	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.530688047 CEST	443	49825	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.532711029 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.532725096 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.534811974 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.534816980 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.534825087 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.534828901 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.545882940 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.545965910 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.546067953 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.548134089 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.548226118 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.548508883 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.548954010 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.549021006 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.551753998 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.551791906 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.551851988 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.552126884 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.552136898 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.552373886 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.552421093 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.552964926 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.552992105 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.553044081 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.553160906 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.553173065 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.562738895 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.563174963 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.563235044 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.563385963 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.563414097 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.563441038 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.563453913 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.566184044 CEST	49824	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:12.566205025 CEST	443	49824	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:12.566463947 CEST	49824	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:12.566796064 CEST	443	49824	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:12.566864967 CEST	49824	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:12.571918964 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.571929932 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:12.571986914 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.572782040 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:12.572793961 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.281177998 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.281789064 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.281873941 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.282212973 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.282227993 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.298423052 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.298794985 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.298832893 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.299209118 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.299216032 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.307255030 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.307590961 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.307615995 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.308075905 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.308083057 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.311124086 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.311367035 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.311393976 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.311681986 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.311686039 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.329040051 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.329407930 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.329468012 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.329745054 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.329763889 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.408417940 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.408576012 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.408735991 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.408736944 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.408824921 CEST	49831	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.408865929 CEST	443	49831	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.411151886 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.411231995 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.411361933 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.411458969 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.411482096 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.428392887 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.428544044 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.428632975 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.428632975 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.428890944 CEST	49832	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.428905964 CEST	443	49832	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.430610895 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.430694103 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.430988073 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.430988073 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.431113958 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.437731981 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.437942028 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.438133955 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.438134909 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.438375950 CEST	49834	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.438385963 CEST	443	49834	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.439872026 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.439951897 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.440074921 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.440160990 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.440179110 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.442572117 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.442754984 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.442842960 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.442842960 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.443177938 CEST	49833	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.443195105 CEST	443	49833	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.444638014 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.444719076 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.444941998 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.444941998 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.445024014 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.461929083 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.462146044 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.462279081 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.462280035 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.462404966 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.462449074 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.463895082 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.463917017 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:13.463978052 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.464200974 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:13.464214087 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.159965992 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.160866976 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.160866976 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.160948038 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.160976887 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.167443037 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.168024063 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.168101072 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.168519020 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.168534994 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.171047926 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.171683073 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.171761990 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.175354958 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.175369024 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.194251060 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.195022106 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.195022106 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.195060015 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.195084095 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.211464882 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.212085962 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.212085962 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.212110996 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.212119102 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.292166948 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.293399096 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.293617010 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.293617010 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.294354916 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.294394970 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.296004057 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.296044111 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.296273947 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.296274900 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.296312094 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.298633099 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.298842907 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.299061060 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.299061060 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.299114943 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.299128056 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.300827980 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.300859928 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.301011086 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.301011086 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.301042080 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.303417921 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.303582907 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.303694010 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.303694010 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.303803921 CEST	49837	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.303841114 CEST	443	49837	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.305324078 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.305335045 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.305481911 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.305481911 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.305500031 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.331048012 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.331285000 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.331387997 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.331388950 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.332642078 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.332701921 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.333193064 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.333273888 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.333587885 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.333587885 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.333714008 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.342452049 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.342647076 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.342761040 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.342761993 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.342835903 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.342848063 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.344434977 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.344516039 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:14.344923973 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.345012903 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:14.345031977 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.042216063 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.042246103 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.042753935 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.042793989 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.043061972 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.043098927 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.043186903 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.043195009 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.043524027 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.043529987 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.050138950 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.050544977 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.050564051 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.050935984 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.050941944 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.088253021 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.088815928 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.088893890 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.089226961 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.089241982 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.098337889 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.098790884 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.098865032 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.099179983 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.099194050 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.172965050 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.173124075 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.173202038 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.173377037 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.173398018 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.173413038 CEST	49843	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.173418999 CEST	443	49843	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.174154997 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.174221992 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.174266100 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.175323963 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.175339937 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.175349951 CEST	49842	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.175354958 CEST	443	49842	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.179836988 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.179917097 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.179995060 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.181452036 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.181550026 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.181623936 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.181667089 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.181987047 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.182043076 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.185842037 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.185849905 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.185864925 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.185868979 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.185878038 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.185926914 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.186172009 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.186209917 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.187891006 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.187937975 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.187999010 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.188092947 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.188106060 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.219846010 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.220004082 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.220067024 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.220143080 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.220143080 CEST	49844	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.220175028 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.220199108 CEST	443	49844	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.222800016 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.222881079 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.222955942 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.223097086 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.223134041 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.274652004 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.274826050 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.274909019 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.274987936 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.275031090 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.275059938 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.275074959 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.277580023 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.277628899 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.277693033 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.277846098 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.277858019 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.410367012 CEST	49851	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:31:15.410396099 CEST	49736	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:15.410420895 CEST	443	49851	142.250.186.164	192.168.2.4
Oct 24, 2024 01:31:15.410543919 CEST	443	49736	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:15.410734892 CEST	49851	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:31:15.410747051 CEST	443	49736	142.250.185.110	192.168.2.4
Oct 24, 2024 01:31:15.410814047 CEST	49736	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:15.410948038 CEST	49736	443	192.168.2.4	142.250.185.110
Oct 24, 2024 01:31:15.411070108 CEST	49851	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:31:15.411082029 CEST	443	49851	142.250.186.164	192.168.2.4
Oct 24, 2024 01:31:15.917181015 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.918180943 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.918180943 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.918275118 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.918291092 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.923265934 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.923598051 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.923626900 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.923923016 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.923937082 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.933197021 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.933821917 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.933821917 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.933901072 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.933917999 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.961201906 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.961515903 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.961600065 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:15.961829901 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:15.961843967 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.008177042 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.008836985 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.008836985 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.008860111 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.008872032 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.048383951 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.048463106 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.048661947 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.048661947 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.048738956 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.048769951 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.050928116 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.051018000 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.051233053 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.051234007 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.051333904 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.053076982 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.053225040 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.053337097 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.053337097 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.053798914 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.053814888 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.055143118 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.055234909 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.055423975 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.055423975 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.055524111 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.069446087 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.069510937 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.069673061 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.069673061 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.069818020 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.069856882 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.071291924 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.071332932 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.071419001 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.071492910 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.071515083 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.092834949 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.092981100 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.093199968 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.093200922 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.093379021 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.093416929 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.095453978 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.095483065 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.095706940 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.095706940 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.095753908 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.137092113 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 24, 2024 01:31:16.145870924 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.146029949 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.146159887 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.146159887 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.146159887 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.148082018 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.148169041 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.148310900 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.148442984 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 24, 2024 01:31:16.148482084 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.148511887 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.148618937 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 24, 2024 01:31:16.264488935 CEST	443	49851	142.250.186.164	192.168.2.4
Oct 24, 2024 01:31:16.264823914 CEST	49851	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:31:16.264853001 CEST	443	49851	142.250.186.164	192.168.2.4
Oct 24, 2024 01:31:16.265717030 CEST	443	49851	142.250.186.164	192.168.2.4
Oct 24, 2024 01:31:16.266083002 CEST	49851	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:31:16.266083002 CEST	49851	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:31:16.266141891 CEST	443	49851	142.250.186.164	192.168.2.4
Oct 24, 2024 01:31:16.311317921 CEST	49851	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:31:16.311352015 CEST	443	49851	142.250.186.164	192.168.2.4
Oct 24, 2024 01:31:16.356780052 CEST	49851	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:31:16.449434042 CEST	49850	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.449462891 CEST	443	49850	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.782912970 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.791897058 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.791938066 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.792326927 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.793520927 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.793528080 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.811937094 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.812777996 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.812797070 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.813404083 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.813409090 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.819060087 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.819087982 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.819786072 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.819792986 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.867454052 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.894633055 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.914741993 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.914779902 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.916187048 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.916193008 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.917774916 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.917876959 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.917949915 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.918909073 CEST	49852	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.918950081 CEST	443	49852	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.921482086 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.921499014 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.922990084 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.922996044 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.932674885 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.932725906 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.932801962 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.934729099 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.934762001 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.941287041 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.941380978 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.941443920 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.941762924 CEST	49854	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.941775084 CEST	443	49854	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.945732117 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.945847034 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.945900917 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.945940018 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.945957899 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.945970058 CEST	49853	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.945976019 CEST	443	49853	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.954586029 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.954610109 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.954685926 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.955081940 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.955096006 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.959074974 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.959105015 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:16.959167957 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.959367037 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:16.959388018 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.045139074 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.045265913 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.045319080 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.046098948 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.046127081 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.050499916 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.051047087 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.051099062 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.051676989 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.051702976 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.057758093 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.057841063 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.057935953 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.059335947 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.059374094 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.059439898 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.059622049 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.059660912 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.059982061 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.059998035 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.673934937 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.674746990 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.674747944 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.674837112 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.674875021 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.692049980 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.692466021 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.692508936 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.692548037 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.692766905 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.692775965 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.692894936 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.692944050 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.693346024 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.693357944 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.796803951 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.797596931 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.797596931 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.797622919 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.797631025 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.803998947 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.804163933 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.804259062 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.804259062 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.804367065 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.804420948 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.806539059 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.806626081 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.806787014 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.806822062 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.806822062 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.806894064 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.807262897 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.807300091 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.807471037 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.807482004 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.822801113 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.822951078 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.822999954 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.823041916 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.823043108 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.823043108 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.823180914 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.823486090 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.823519945 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.823520899 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.823537111 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.823558092 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.825648069 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.825685024 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.825717926 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.825720072 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.825799942 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.825918913 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.825918913 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.825958014 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.825999022 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.826034069 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.926186085 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.926320076 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.926482916 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.926482916 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.926559925 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.926579952 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.928802013 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.928883076 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.929147959 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.929147959 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.929228067 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.938915014 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.939203024 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.939332008 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.939332962 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.939714909 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.939753056 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.941102982 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.941170931 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:17.941680908 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.941682100 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:17.941756010 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.129003048 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.129031897 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.542361975 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.547708035 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.547781944 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.548794985 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.548809052 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.588736057 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.589108944 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.605783939 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.605817080 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.606966019 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.606971979 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.608491898 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.608546972 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.609587908 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.609601974 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.666809082 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.667251110 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.667339087 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.668065071 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.668080091 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.678073883 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.678226948 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.678298950 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.678581953 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.678627968 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.678658962 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.678674936 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.683784962 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.683855057 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.683936119 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.684165955 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.684195995 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.693927050 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.694474936 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.694555044 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.694947004 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.694961071 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.737149954 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.737251043 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.737304926 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.737505913 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.737528086 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.737577915 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.737586975 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.738014936 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.738590002 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.738656044 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.740027905 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.740027905 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.740058899 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.740081072 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.745877981 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.745908022 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.745961905 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.747592926 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.747637987 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.747709990 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.748621941 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.748637915 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.748790979 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.748807907 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.802119017 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.802274942 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.802345991 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.802475929 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.802476883 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.802517891 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.802547932 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.807579994 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.807601929 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.807668924 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.808021069 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.808034897 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.824259996 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.824328899 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.824385881 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.824702024 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.824743986 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.824774027 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.824790955 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.830830097 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.830854893 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:18.830904961 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.831413031 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:18.831429958 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.434947014 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.436043024 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.436115026 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.436738014 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.436750889 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.474883080 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.476351976 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.476382017 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.480464935 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.480480909 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.496077061 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.497443914 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.497443914 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.497484922 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.497503996 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.562850952 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.563575029 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.563615084 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.564371109 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.564383984 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.565423965 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.565862894 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.565890074 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.566509008 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.566518068 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.605372906 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.605509043 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.608511925 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.611198902 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.611216068 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.611272097 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.611277103 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.614639044 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.614721060 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.615039110 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.615039110 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.615115881 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.628144979 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.628295898 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.628386974 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.628624916 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.628648996 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.628679037 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.628685951 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.632689953 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.632775068 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.633045912 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.633045912 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.633121014 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.666565895 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.666651964 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.666893005 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.666950941 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.666950941 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.666980028 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.667002916 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.670366049 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.670403957 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.670707941 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.670707941 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.670762062 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.694478035 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.694619894 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.694696903 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.694931984 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.694931984 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.694945097 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.694957018 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.700397968 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.700479031 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.701055050 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.701505899 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.701535940 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.714277983 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.714447975 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.714914083 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.714914083 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.714914083 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.717873096 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.717936993 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:19.718198061 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.718198061 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:19.718265057 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.015153885 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.015182018 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.358128071 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.359009027 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.359009027 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.359102964 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.359133959 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.390470028 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.390836000 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.390901089 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.391216993 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.391230106 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.419363022 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.419680119 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.419754982 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.420213938 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.420227051 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.429308891 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.429656982 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.429716110 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.430068970 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.430083036 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.455261946 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.455724001 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.455754995 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.455915928 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.455920935 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.489626884 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.489794970 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.489880085 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.489968061 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.489968061 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.490010023 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.490037918 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.492587090 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.492628098 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.492697954 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.492845058 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.492856026 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.521508932 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.521672010 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.521740913 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.521816969 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.521816969 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.521857977 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.521902084 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.524122000 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.524177074 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.524230003 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.524348021 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.524360895 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.551808119 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.552006006 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.552057981 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.552403927 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.552424908 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.552448034 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.552462101 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.556649923 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.556833982 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.556885004 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.559845924 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.559873104 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.559928894 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.562917948 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.562927008 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.563004017 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.563026905 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.567939043 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.567989111 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.568180084 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.568644047 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.568670034 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.585611105 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.585764885 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.585817099 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.585928917 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.585949898 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.585963011 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.585969925 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.589159966 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.589240074 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:20.589307070 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.589550972 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:20.589585066 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.223848104 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.224292040 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.224327087 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.224900007 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.224906921 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.274467945 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.274796009 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.274832010 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.275168896 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.275175095 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.283040047 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.283380032 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.283399105 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.283719063 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.283725977 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.305597067 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.305896044 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.305932999 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.306253910 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.306260109 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.335887909 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.336347103 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.336424112 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.336843014 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.336857080 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.351774931 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.351914883 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.351973057 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.352073908 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.352091074 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.352103949 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.352109909 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.354686022 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.354756117 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.354820013 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.354964018 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.355000019 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.405960083 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.406137943 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.406234980 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.406234980 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.406450987 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.406466961 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.408145905 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.408226967 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.408374071 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.408436060 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.408453941 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.410443068 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.410515070 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.410661936 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.410661936 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.410801888 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.410813093 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.412425041 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.412461042 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.412655115 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.412655115 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.412682056 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.435302973 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.435511112 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.435678959 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.435679913 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.435964108 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.435976982 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.437438965 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.437520981 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.437608004 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.437716007 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.437741041 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.465244055 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.465373993 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.465460062 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.465460062 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.465826988 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.465856075 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.467022896 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.467042923 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:21.467334032 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.467365026 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:21.467369080 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.093523979 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.094155073 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.094213009 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.094425917 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.094441891 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.141140938 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.141793966 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.141859055 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.141891003 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.141904116 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.168617010 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.168906927 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.168932915 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.169450045 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.169456005 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.174882889 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.175173044 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.175249100 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.175491095 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.175503969 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.226124048 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.226329088 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.226423979 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.226423979 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.226497889 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.226512909 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.228781939 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.228863955 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.229084969 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.229084969 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.229161024 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.229672909 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.230237961 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.230252028 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.230261087 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.230273008 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.269979954 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.270032883 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.270153046 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.270205021 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.270306110 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.270306110 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.270987034 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.271022081 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.272252083 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.272332907 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.272495985 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.272566080 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.272584915 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.302568913 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.302643061 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.302774906 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.302774906 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.303338051 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.303352118 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.304697037 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.304778099 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.304965973 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.304965973 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.305042028 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.305748940 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.305880070 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.305999041 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.306096077 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.306096077 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.306118965 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.306142092 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.307585001 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.307666063 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.307862043 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.307862043 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.307945967 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.362782001 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.362838984 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.363008976 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.363044977 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.363209963 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.363209963 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.363209963 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.365504980 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.365540981 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.365690947 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.365772963 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.365787029 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.676635027 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.676656008 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.982250929 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.982722044 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.982784986 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:22.983130932 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:22.983150005 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.018845081 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.019692898 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.019776106 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.020155907 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.020173073 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.035259962 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.035702944 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.035777092 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.036092997 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.036104918 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.056669950 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.057126999 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.057212114 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.057359934 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.057375908 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.112593889 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.112648964 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.112720966 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.112778902 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.112814903 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.112850904 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.112879038 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.113044024 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.113080978 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.113114119 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.113128901 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.114464045 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.114989996 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.115020037 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.115495920 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.115505934 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.116435051 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.116493940 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.116556883 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.116784096 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.116797924 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.171222925 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.171397924 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.171464920 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.171545982 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.171545982 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.171576977 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.171614885 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.173687935 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.173744917 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.173816919 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.173957109 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.173973083 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.187400103 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.187807083 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.187877893 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.187956095 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.187992096 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.188028097 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.188043118 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.190150976 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.190184116 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.190252066 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.190408945 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.190426111 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.214993954 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.215022087 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.215090036 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.215107918 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.215157986 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.215298891 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.215300083 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.215339899 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.215372086 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.217390060 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.217430115 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.217502117 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.217648983 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.217673063 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.246401072 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.246584892 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.246649027 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.246684074 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.246701956 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.246726990 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.246740103 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.248614073 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.248688936 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.248758078 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.248936892 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.248972893 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.930634022 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.930955887 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.931518078 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.931518078 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.931539059 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.931550980 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.932008028 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.932008028 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.932044983 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.932058096 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.951306105 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.952112913 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.952112913 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.952155113 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.952178955 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.995767117 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.996746063 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.996824980 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:23.997473001 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:23.997486115 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.046510935 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.047310114 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.047310114 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.047342062 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.047354937 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.060055017 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.060206890 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.060363054 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.060400963 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.060415983 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.060444117 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.060450077 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.061608076 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.061777115 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.061959982 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.061959982 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.062057018 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.062081099 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.063237906 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.063348055 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.063467026 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.063579082 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.063599110 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.064167976 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.064256907 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.064379930 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.064464092 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.064485073 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.079365969 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.079524994 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.079688072 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.079688072 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.080116987 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.080141068 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.081444979 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.081469059 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.081675053 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.081675053 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.081726074 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.126892090 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.127043009 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.127125025 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.127125025 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.127223015 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.127242088 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.128935099 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.128959894 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.129086971 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.129149914 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.129153967 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.176826954 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.176958084 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.177037954 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.177072048 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.177072048 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.177088976 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.177099943 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.178812981 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.178894997 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.179122925 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.179122925 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.179198980 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.808139086 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.808547974 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.808599949 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.809087038 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.809098959 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.814650059 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.815007925 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.815099955 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.815403938 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.815419912 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.866966963 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.867291927 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.867307901 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.867623091 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.867628098 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.873039961 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.873481989 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.873560905 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.873805046 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.873819113 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.909635067 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.909936905 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.910013914 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.910298109 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.910311937 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.938740969 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.938884020 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.938936949 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.938977003 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.938993931 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.939007044 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.939013958 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.941605091 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.941631079 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.941690922 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.941826105 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.941838026 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.998229980 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.998393059 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.998447895 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.998646975 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.998646975 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:24.998657942 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:24.998666048 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.001570940 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.001627922 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.001698017 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.001805067 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.001822948 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.013540983 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.013690948 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.013755083 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.013921022 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.013921022 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.013984919 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.014014959 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.017260075 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.017302990 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.017375946 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.017638922 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.017668962 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.039722919 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.039892912 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.039946079 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.039972067 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.040015936 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.040067911 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.040124893 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.040149927 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.040174007 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.040186882 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.042607069 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.042646885 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.042721033 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.042870998 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.042886972 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.089101076 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.089170933 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.089229107 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.089271069 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.089303017 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.089334011 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.089334011 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.089360952 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.089406013 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.089417934 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.091617107 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.091643095 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.091720104 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.091850996 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.091876984 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.690207005 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.691571951 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.691600084 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.692017078 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.692033052 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.754498959 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.755119085 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.755199909 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.755359888 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.755376101 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.782516003 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.783159018 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.783159018 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.783199072 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.783205986 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.821979046 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.822135925 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.822225094 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.822225094 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.822366953 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.822380066 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.824620962 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.824688911 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.824805975 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.824954987 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.824987888 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.833580017 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.834230900 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.834230900 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.834292889 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.834326029 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.847623110 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.848289013 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.848289967 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.848339081 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.848366022 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.885047913 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.885195017 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.885309935 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.885309935 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.885696888 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.885735035 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.887293100 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.887352943 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.887559891 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.887559891 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.887622118 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.930466890 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.930510998 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.930605888 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.930738926 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.930738926 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.930911064 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.930931091 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.932702065 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.932734013 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.932881117 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.932881117 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.932904005 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.964131117 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.964356899 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.964561939 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.964562893 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.965744972 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.965778112 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.966979027 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.967022896 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.967190027 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.967384100 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.967413902 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.980582952 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.980729103 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.980916977 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.980917931 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.981117964 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.981142044 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.982754946 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.982774019 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:25.982943058 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.982943058 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:25.982959986 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.296513081 CEST	443	49851	142.250.186.164	192.168.2.4
Oct 24, 2024 01:31:26.296664953 CEST	443	49851	142.250.186.164	192.168.2.4
Oct 24, 2024 01:31:26.296943903 CEST	49851	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:31:26.554053068 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.554497957 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.554574966 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.554976940 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.554991007 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.630059958 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.630520105 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.630608082 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.630979061 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.630995989 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.671158075 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.672084093 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.672101021 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.672810078 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.672815084 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.683650017 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.683727026 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.683779001 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.683988094 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.684012890 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.684029102 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.684036970 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.687835932 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.687933922 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.688009977 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.688422918 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.688453913 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.705065012 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.705583096 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.705624104 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.706113100 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.706120968 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.732743979 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.734462976 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.734489918 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.735310078 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.735321999 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.759964943 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.760065079 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.760122061 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.760251999 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.760281086 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.760298014 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.760304928 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.763053894 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.763103008 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.763159990 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.763300896 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.763322115 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.801362038 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.801403046 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.801434040 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.801446915 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.801462889 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.801496029 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.801589966 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.801604986 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.801611900 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.801615953 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.804188013 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.804238081 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.804318905 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.804528952 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.804550886 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.840605974 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.840769053 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.840830088 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.840980053 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.841006994 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.841023922 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.841032028 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.845890999 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.845942974 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.846020937 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.846189022 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.846209049 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.865776062 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.865847111 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.865895987 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.865909100 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.865951061 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.865987062 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.866226912 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.866236925 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.866246939 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.866252899 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.868907928 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.868958950 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:26.869026899 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.869215012 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:26.869231939 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.423124075 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.423991919 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.423991919 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.424086094 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.424119949 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.489326954 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.490158081 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.490158081 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.490246058 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.490279913 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.552946091 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.553169012 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.553414106 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.553415060 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.553415060 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.553476095 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.555675983 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.555731058 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.555777073 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.555815935 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.556049109 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.556062937 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.556116104 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.556186914 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.556200027 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.580225945 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.580966949 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.580967903 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.581053019 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.581090927 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.606477976 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.609652042 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.609652042 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.609735012 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.609766006 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.616262913 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.616336107 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.616503954 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.616503954 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.616503954 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.618277073 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.618314028 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.618423939 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.618505001 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.618525982 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.652991056 CEST	49851	443	192.168.2.4	142.250.186.164
Oct 24, 2024 01:31:27.653001070 CEST	443	49851	142.250.186.164	192.168.2.4
Oct 24, 2024 01:31:27.689747095 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.689908981 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.690160990 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.690160990 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.690161943 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.692001104 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.692082882 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.692265034 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.692265034 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.692348003 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.709166050 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.709237099 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.709337950 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.709364891 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.709434032 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.709434032 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.709481955 CEST	49915	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.709512949 CEST	443	49915	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.711121082 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.711158037 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.711338997 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.711338997 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.711391926 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.824171066 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.824338913 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.824450970 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.824450970 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.824608088 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.824621916 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.827013969 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.827095032 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.827282906 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.827378035 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.827400923 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.855451107 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.855510950 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.931467056 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.931525946 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:27.993212938 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:27.993273020 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.354098082 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.354770899 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.354815006 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.354882002 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.354891062 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.403213978 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.403517962 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.403532028 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.403851986 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.403856039 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.437602043 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.437918901 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.437993050 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.438235044 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.438247919 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.483927965 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.484090090 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.484235048 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.484236002 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.484236002 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.486434937 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.486521959 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.486713886 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.486867905 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.486901045 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.498960018 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.499249935 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.499278069 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.499569893 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.499581099 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.536979914 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.537128925 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.537180901 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.537237883 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.537245989 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.539278030 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.539319992 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.539385080 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.539510965 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.539531946 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.562310934 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.562609911 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.562649012 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.562947035 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.562957048 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.566657066 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.566735029 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.566793919 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.566814899 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.566844940 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.566917896 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.566917896 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.566958904 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.566991091 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.567006111 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.568926096 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.568947077 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.569319963 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.569492102 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.569514036 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.633260012 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.633419037 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.633629084 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.634643078 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.634643078 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.634687901 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.634715080 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.636828899 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.636912107 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.637006998 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.637181997 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.637219906 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.710024118 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.710180044 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.710318089 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.710479021 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.710479021 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.710501909 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.710525990 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.712614059 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.712636948 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.712737083 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.712896109 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.712908983 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:28.783744097 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:28.783773899 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.239602089 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.240135908 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.240223885 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.240521908 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.240535021 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.285434008 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.285830021 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.285891056 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.286176920 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.286190033 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.316814899 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.317231894 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.317250967 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.317724943 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.317739964 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.371676922 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.371838093 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.372025967 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.372025967 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.372025967 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.374646902 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.374684095 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.374764919 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.374905109 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.374922991 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.376357079 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.376770020 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.376857996 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.377002954 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.377017975 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.416711092 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.416779041 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.416893959 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.416964054 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.416965008 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.430520058 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.430521011 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.430586100 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.430628061 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.447743893 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.447906971 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.448036909 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.448148012 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.448220015 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.448362112 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.448792934 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.448816061 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.448827028 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.448832035 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.450115919 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.450156927 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.456248999 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.456306934 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.456480980 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.457005024 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.457042933 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.462241888 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.463139057 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.463154078 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.464046955 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.464051008 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.505162954 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.505323887 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.505403042 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.505928993 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.505968094 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.506135941 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.506151915 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.511477947 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.511559963 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.511641979 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.511924982 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.511959076 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.597904921 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.598062038 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.598126888 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.598562956 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.598573923 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.598582029 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.598584890 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.602983952 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.603065968 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.603162050 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.603616953 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.603650093 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:29.686499119 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:29.686533928 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.123833895 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.127115011 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.127190113 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.127794027 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.127808094 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.195405006 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.196047068 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.196084976 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.196700096 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.196711063 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.202225924 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.202610970 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.202688932 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.203011990 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.203027964 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.269049883 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.269418955 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.269500017 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.269740105 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.269753933 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.325809956 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.325880051 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.325946093 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.325968981 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.325999022 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.326252937 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.326252937 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.326297045 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.326323986 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.328567028 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.328593016 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.328757048 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.328891039 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.328902960 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.338915110 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.339065075 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.339118958 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.339201927 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.339219093 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.339232922 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.339238882 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.341454029 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.341526031 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.341675043 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.341799974 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.341831923 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.345084906 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.345372915 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.345402956 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.345726967 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.345741034 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.351993084 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.352057934 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.352112055 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.352138996 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.352173090 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.352193117 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.352193117 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.352221012 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.352251053 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.352263927 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.353996038 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.354012012 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.354064941 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.354209900 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.354221106 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.400533915 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.400688887 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.400813103 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.400846958 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.400846958 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.400859118 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.400868893 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.402952909 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.402975082 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.403208017 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.403340101 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.403351068 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.475877047 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.475928068 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.475975990 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.476037025 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.476130009 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.476130009 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.476156950 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.476177931 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.478216887 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.478262901 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:30.478328943 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.478538990 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:30.478584051 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.071310043 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.071814060 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.071830988 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.072510004 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.072515011 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.098216057 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.098782063 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.098825932 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.099353075 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.099361897 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.102616072 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.102988958 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.102999926 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.103600979 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.103604078 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.144401073 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.145426035 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.145487070 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.145873070 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.145888090 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.208617926 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.212202072 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.212286949 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.212342024 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.212352991 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.212367058 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.212371111 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.215589046 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.215671062 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.216595888 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.217184067 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.217221022 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.222419977 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.222949982 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.222995996 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.223664999 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.223680973 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.231743097 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.231841087 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.231954098 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.231992006 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.232022047 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.232793093 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.232812881 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.232827902 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.232835054 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.234385967 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.234546900 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.234786987 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.235939980 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.235956907 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.236006975 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.236227989 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.236238956 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.236247063 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.236251116 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.236259937 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.236263037 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.238770962 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.238790035 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.238853931 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.239031076 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.239047050 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.280070066 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.280139923 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.280256987 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.280328989 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.280535936 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.280580044 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.280608892 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.280625105 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.282769918 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.282778978 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.282943964 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.283237934 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.283248901 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.354231119 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.354418039 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.354573011 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.354671955 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.354708910 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.354734898 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.354751110 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.358217001 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.358243942 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.358426094 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.358797073 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.358813047 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.942301035 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.942744970 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.942765951 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.943156958 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:31.943164110 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:31.996303082 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.000715017 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.000730991 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.006467104 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.006470919 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.010185957 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.011075974 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.011117935 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.013298035 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.013304949 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.021780014 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.022248983 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.022259951 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.023679018 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.023683071 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.072668076 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.072819948 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.072896004 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.073517084 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.073534966 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.073571920 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.073579073 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.085511923 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.085592985 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.085668087 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.085936069 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.085972071 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.098825932 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.099654913 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.099695921 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.102426052 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.102432966 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.134558916 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.134648085 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.134695053 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.134948969 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.134960890 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.134969950 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.134974957 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.141560078 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.141597033 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.141674042 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.142571926 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.142635107 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.142642975 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.142668009 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.142726898 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.142745972 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.142802954 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.143114090 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.143151999 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.149605036 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.149684906 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.149821997 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.150044918 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.150078058 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.153533936 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.153681993 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.153753996 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.165309906 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.165323973 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.169281006 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.169307947 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.169359922 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.186882973 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.186897993 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.234268904 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.234642982 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.234747887 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.234848022 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.234848976 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.235625982 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.235667944 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.235694885 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.235711098 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.242362976 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.242448092 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.242703915 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.242943048 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.242980003 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.816679955 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.818620920 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.818702936 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.819261074 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.819277048 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.902041912 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.902435064 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.902508974 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.902920961 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.902935028 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.902962923 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.903382063 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.903424025 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.903681993 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.903692961 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.944577932 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.945091963 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.945110083 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.945308924 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.945312977 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.946568966 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.946783066 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.946846008 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.946918011 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.946952105 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.946978092 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.946990967 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.949347019 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.949374914 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.949445009 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.949563980 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.949585915 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.981940985 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.982834101 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.982909918 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:32.983158112 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:32.983170986 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.033457041 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.033536911 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.033730030 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.033730030 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.033812046 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.033852100 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.035295010 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.035479069 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.035545111 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.044261932 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.044286966 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.044312000 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.044322968 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.046462059 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.046516895 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.046595097 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.047996044 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.048027039 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.056097031 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.056179047 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.056298018 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.056389093 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.056418896 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.076313019 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.076344967 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.076395988 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.076483011 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.077861071 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.077876091 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.077905893 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.077913046 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.080014944 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.080055952 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.080190897 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.080333948 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.080355883 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.113385916 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.113537073 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.113600969 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.121370077 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.121387959 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.121486902 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.121500015 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.123986006 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.124017000 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.124079943 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.132056952 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.132082939 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.853765011 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.854393005 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.854449034 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.854640961 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.854649067 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.857213020 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.857641935 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.857707977 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.858099937 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.858114004 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.860519886 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.861166000 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.861166000 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.861197948 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.861216068 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.861782074 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.862530947 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.862530947 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.862545013 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.862552881 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.897433043 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.898061037 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.898061037 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.898113012 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.898142099 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.983302116 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.983483076 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.983592987 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.983592987 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.983725071 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.983763933 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.986017942 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.986107111 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.986260891 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.986331940 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.986351967 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.988308907 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.988449097 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.988534927 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.988534927 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.988610029 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.988640070 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.989306927 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.989454985 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.989566088 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.989566088 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.989816904 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.989821911 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.990467072 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.990494967 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.990643978 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.990643978 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.990677118 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.991358995 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.991430044 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:33.991569042 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.991643906 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:33.991662979 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.000581026 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.000646114 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.000741005 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.000763893 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.000845909 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.000845909 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.000910997 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.000925064 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.002558947 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.002571106 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.002723932 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.002723932 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.002746105 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.036370039 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.036504984 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.036608934 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.036608934 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.036672115 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.036696911 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.038328886 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.038377047 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.038474083 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.038578987 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.038605928 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.724140882 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.724643946 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.724680901 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.725157022 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.725162983 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.726525068 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.726834059 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.726897955 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.727140903 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.727154016 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.742146015 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.742443085 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.742476940 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.742824078 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.742835045 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.744564056 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.744879007 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.744909048 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.745246887 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.745253086 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.775090933 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.775521040 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.775604010 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.775834084 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.775849104 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.854533911 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.854707003 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.854765892 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.854796886 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.854815960 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.854825974 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.854830980 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.857449055 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.857536077 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.857625961 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.857779026 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.857816935 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.871056080 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.871135950 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.871196032 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.871227980 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.871253967 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.871299982 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.871347904 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.871365070 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.871376991 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.871382952 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.873845100 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.873888969 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.873992920 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.874244928 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.874263048 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.904278994 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.904437065 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.904525042 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.904604912 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.904604912 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.904650927 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.904676914 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.906698942 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.906727076 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.906826973 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.906966925 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.906992912 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.911782026 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.911864042 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.911964893 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.911998987 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.912017107 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.912034035 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.912039995 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.914077997 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.914089918 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.914153099 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.914316893 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.914336920 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.931499958 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.931674957 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.931842089 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.931993008 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.931993961 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.932009935 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.932029009 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.934377909 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.934415102 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 24, 2024 01:31:34.934504986 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.934628963 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 24, 2024 01:31:34.934647083 CEST	443	49964	13.107.246.60	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 01:30:11.424837112 CEST	53	61242	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:11.425796986 CEST	53	63526	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:12.672004938 CEST	53	60094	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:13.152399063 CEST	49722	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:30:13.152796030 CEST	52060	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:30:13.161369085 CEST	53	49722	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:13.161412954 CEST	53	52060	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:15.347099066 CEST	51916	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:30:15.347142935 CEST	62989	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:30:15.354919910 CEST	53	62989	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:15.354964972 CEST	53	51916	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:23.905836105 CEST	53	63854	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:27.712249041 CEST	138	138	192.168.2.4	192.168.2.255
Oct 24, 2024 01:30:28.940170050 CEST	55504	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:30:28.940170050 CEST	53253	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:30:28.947523117 CEST	53	53253	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:28.948487997 CEST	53	55504	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:29.615793943 CEST	53	49288	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:30.362107038 CEST	53494	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:30:30.363049030 CEST	56706	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:30:30.369775057 CEST	53	53494	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:30.370671988 CEST	53	56706	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:30.622272968 CEST	53	52869	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:33.644171000 CEST	65302	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:30:33.644499063 CEST	63405	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:30:33.651640892 CEST	53	65302	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:33.652287960 CEST	53	63405	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:34.247690916 CEST	50141	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:30:34.248014927 CEST	53026	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:30:34.255654097 CEST	53	53026	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:34.255667925 CEST	53	50141	1.1.1.1	192.168.2.4
Oct 24, 2024 01:30:48.625195980 CEST	53	61150	1.1.1.1	192.168.2.4
Oct 24, 2024 01:31:10.970815897 CEST	53	51118	1.1.1.1	192.168.2.4
Oct 24, 2024 01:31:10.976291895 CEST	53	53605	1.1.1.1	192.168.2.4
Oct 24, 2024 01:31:27.661429882 CEST	53	55345	1.1.1.1	192.168.2.4
Oct 24, 2024 01:31:32.003360033 CEST	53	60758	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 01:30:13.152399063 CEST	192.168.2.4	1.1.1.1	0x290d	Standard query (0)	chat.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:30:13.152796030 CEST	192.168.2.4	1.1.1.1	0x343f	Standard query (0)	chat.google.com	65	IN (0x0001)	false
Oct 24, 2024 01:30:15.347099066 CEST	192.168.2.4	1.1.1.1	0x6836	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:30:15.347142935 CEST	192.168.2.4	1.1.1.1	0x1f3d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 01:30:28.940170050 CEST	192.168.2.4	1.1.1.1	0x1ec5	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Oct 24, 2024 01:30:28.940170050 CEST	192.168.2.4	1.1.1.1	0xd5a	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:30:30.362107038 CEST	192.168.2.4	1.1.1.1	0xe6f3	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:30:30.363049030 CEST	192.168.2.4	1.1.1.1	0xdca9	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 24, 2024 01:30:33.644171000 CEST	192.168.2.4	1.1.1.1	0x6b2	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:30:33.644499063 CEST	192.168.2.4	1.1.1.1	0xb582	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 24, 2024 01:30:34.247690916 CEST	192.168.2.4	1.1.1.1	0xcb2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:30:34.248014927 CEST	192.168.2.4	1.1.1.1	0x30e4	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 01:30:13.161369085 CEST	1.1.1.1	192.168.2.4	0x290d	No error (0)	chat.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:30:15.354919910 CEST	1.1.1.1	192.168.2.4	0x1f3d	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 01:30:15.354964972 CEST	1.1.1.1	192.168.2.4	0x6836	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:30:27.399660110 CEST	1.1.1.1	192.168.2.4	0xa051	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:30:27.399660110 CEST	1.1.1.1	192.168.2.4	0xa051	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:30:28.947523117 CEST	1.1.1.1	192.168.2.4	0xd5a	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:30:28.947523117 CEST	1.1.1.1	192.168.2.4	0xd5a	No error (0)	www3.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:30:28.948487997 CEST	1.1.1.1	192.168.2.4	0x1ec5	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:30:30.369775057 CEST	1.1.1.1	192.168.2.4	0xe6f3	No error (0)	play.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:30:33.651640892 CEST	1.1.1.1	192.168.2.4	0x6b2	No error (0)	play.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:30:34.255654097 CEST	1.1.1.1	192.168.2.4	0x30e4	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 01:30:34.255667925 CEST	1.1.1.1	192.168.2.4	0xcb2	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:30:44.741739035 CEST	1.1.1.1	192.168.2.4	0x65ed	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:30:44.741739035 CEST	1.1.1.1	192.168.2.4	0x65ed	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:31:03.709474087 CEST	1.1.1.1	192.168.2.4	0x96a6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:31:03.709474087 CEST	1.1.1.1	192.168.2.4	0x96a6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:31:04.654879093 CEST	1.1.1.1	192.168.2.4	0x2078	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:31:04.654879093 CEST	1.1.1.1	192.168.2.4	0x2078	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:31:24.749912024 CEST	1.1.1.1	192.168.2.4	0x2899	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:31:24.749912024 CEST	1.1.1.1	192.168.2.4	0x2899	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

chat.google.com

fs.microsoft.com

https:

accounts.youtube.com

play.google.com

www.google.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	142.250.185.110	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:30:14 UTC	848	OUT	GET /dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10 HTTP/1.1 Host: chat.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 23:30:14 UTC	4469	IN	HTTP/1.1 302 Found Content-Type: application/binary X-Frame-Options: DENY Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Timing-Allow-Origin: https://mail.google.com Location: https://accounts.google.com/ServiceLogin?service=dynamite&passive=1209600&osid=1&continue=https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls%3D10 P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: same-site Content-Security-Policy: script-src 'report-sample' 'nonce-sd0NnsxQiEOviO_l5fqKVA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DynamiteWebUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.youtube.com/iframe_api https://s.ytimg.com/yts/jsbin/ https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DynamiteWebUi/cspreport/allowlist;frame-src https://tracedepot-pa.clients6.google.com/static/ https://clients6.google.com/static/ https://docs.google.com/ https://docs.sandbox.google.com/ https://docs-qa.corp.google.com/ https://docs.google.com/picker/ https://content.googleapis.com/static/ https://contacts.google.com/ https://clients5.google.com/pagead/drt/dn/ https://drive.google.com/ https://dynamiteintegration-pa-staging-googleapis.sandbox.google.com https://dynamiteintegration-p [TRUNCATED] Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DynamiteWebUi/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="DynamiteWebUi" Report-To: {"group":"DynamiteWebUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/DynamiteWebUi"}]} Date: Wed, 23 Oct 2024 23:30:14 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Set-Cookie: NID=518=ad1xLCq2hXZEXS2b_w81-bXIw0Wt0kgpusZ1eKBrl5n5rMqKZLGCNP4gFCaXTPm3raifO-xp4esAYH9bwGtPdGVDB-F1Z4xvuJnqAmLFJUxgL5YD3OKy_4oIkL9XJtIjAWle3qozJ4dXf37y3akTitboe3l8ESdOhzCEhp_-DnVZses0AQ; expires=Thu, 24-Apr-2025 23:30:14 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:30:17 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 23:30:17 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=62155 Date: Wed, 23 Oct 2024 23:30:17 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:30:18 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 23:30:18 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=62123 Date: Wed, 23 Oct 2024 23:30:18 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 23:30:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49776	142.250.186.46	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:30:29 UTC	1223	OUT	GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=307457178&timestamp=1729726227520 HTTP/1.1 Host: accounts.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 23:30:30 UTC	1969	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://accounts.google.com Content-Security-Policy: frame-ancestors https://accounts.google.com Content-Security-Policy: script-src 'report-sample' 'nonce-UtFHcu-yB_lgKyIEp7CTrg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 23 Oct 2024 23:30:29 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/AccountsDomainCookiesCheckConnectionHttp/web-reports?context=eJzjstDikmII1JBikPj6kkkNiJ3SZ7AGAHHSv_OsBUB8ufsS63UgVu25xGoMxEUSV1gbgFiIh2Nq37MdbAI3dl07yaykl5RfGJ-ZkppXkllSmZKfm5iZl5yfn52ZWlycWlSWWhRvZGBkYmhgaKxnYBFfYAAA5N4tmw" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 23:30:30 UTC	1969	IN	Data Raw: 37 35 62 63 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 55 74 46 48 63 75 2d 79 42 5f 6c 67 4b 79 49 45 70 37 43 54 72 67 22 3e 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f Data Ascii: 75bc<html><head><script nonce="UtFHcu-yB_lgKyIEp7CTrg">"use strict";this.default_AccountsDomaincookiesCheckconnectionJs=this.default_AccountsDomaincookiesCheckconnectionJs\|\|{};(function(_){var window=this;try{_._F_toggles_initialize=function(a){(typeo
2024-10-23 23:30:30 UTC	1969	IN	Data Raw: 72 69 64 65 6e 74 5c 2f 28 5c 64 2e 5c 64 29 2f 2e 65 78 65 63 28 62 29 2c 0a 63 5b 31 5d 3d 3d 22 37 2e 30 22 29 69 66 28 62 26 26 62 5b 31 5d 29 73 77 69 74 63 68 28 62 5b 31 5d 29 7b 63 61 73 65 20 22 34 2e 30 22 3a 61 3d 22 38 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 35 2e 30 22 3a 61 3d 22 39 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 36 2e 30 22 3a 61 3d 22 31 30 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 37 2e 30 22 3a 61 3d 22 31 31 2e 30 22 7d 65 6c 73 65 20 61 3d 22 37 2e 30 22 3b 65 6c 73 65 20 61 3d 63 5b 31 5d 3b 62 3d 61 7d 65 6c 73 65 20 62 3d 22 22 3b 72 65 74 75 72 6e 20 62 7d 76 61 72 20 64 3d 52 65 67 45 78 70 28 22 28 5b 41 2d 5a 5d 5b 5c 5c 77 20 5d 2b 29 2f 28 5b 5e 5c 5c 73 5d 2b 29 5c 5c 73 2a 28 3f 3a 5c 5c 28 28 Data Ascii: rident\/(\d.\d)/.exec(b),c[1]=="7.0")if(b&&b[1])switch(b[1]){case "4.0":a="8.0";break;case "5.0":a="9.0";break;case "6.0":a="10.0";break;case "7.0":a="11.0"}else a="7.0";else a=c[1];b=a}else b="";return b}var d=RegExp("([A-Z][\\w ]+)/([^\\s]+)\\s*(?:\\((
2024-10-23 23:30:30 UTC	1969	IN	Data Raw: 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 69 67 69 6e 74 22 3a 72 65 74 75 72 6e 28 41 61 3f 0a 61 3e 3d 42 61 26 26 61 3c 3d 43 61 3a 61 5b 30 5d 3d 3d 3d 22 2d 22 3f 75 61 28 61 2c 44 61 29 3a 75 61 28 61 2c 45 61 29 29 3f 4e 75 6d 62 65 72 28 61 29 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 69 66 28 43 28 61 29 29 72 65 74 75 72 6e 7d 65 6c 73 65 20 69 66 28 46 61 26 26 61 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 73 Data Ascii: ch(typeof a){case "number":return isFinite(a)?a:String(a);case "bigint":return(Aa?a>=Ba&&a<=Ca:a[0]==="-"?ua(a,Da):ua(a,Ea))?Number(a):String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(C(a))return}else if(Fa&&a!=null&&a ins
2024-10-23 23:30:30 UTC	1969	IN	Data Raw: 76 61 72 20 62 3b 69 66 28 61 26 26 28 62 3d 51 61 29 21 3d 6e 75 6c 6c 26 26 62 2e 68 61 73 28 61 29 26 26 28 62 3d 61 2e 43 29 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 69 66 28 63 3d 3d 3d 62 2e 6c 65 6e 67 74 68 2d 31 26 26 41 28 64 29 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 7b 76 61 72 20 66 3d 64 5b 65 5d 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 66 29 26 26 0a 52 61 28 66 2c 61 29 7d 65 6c 73 65 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 64 29 26 26 52 61 28 64 2c 61 29 7d 61 3d 45 3f 61 2e 43 3a 4d 61 28 61 2e 43 2c 50 61 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 31 29 3b 65 3d 21 45 3b 69 66 28 62 3d 61 2e 6c 65 6e 67 74 68 29 7b 64 3d 61 5b 62 2d 31 Data Ascii: var b;if(a&&(b=Qa)!=null&&b.has(a)&&(b=a.C))for(var c=0;c<b.length;c++){var d=b[c];if(c===b.length-1&&A(d))for(var e in d){var f=d[e];Array.isArray(f)&&Ra(f,a)}else Array.isArray(d)&&Ra(d,a)}a=E?a.C:Ma(a.C,Pa,void 0,void 0,!1);e=!E;if(b=a.length){d=a[b-1
2024-10-23 23:30:30 UTC	1969	IN	Data Raw: 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 63 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 57 61 5b 62 5b 63 5d 5d 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f Data Ascii: l.iterator",function(a){if(a)return a;a=Symbol("c");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=Wa[b[c]];typeof d==="function"&&typeo
2024-10-23 23:30:30 UTC	1969	IN	Data Raw: 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 65 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 2e 67 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6b 29 7b 6b 3d 48 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 63 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 22 29 3b 64 28 6b 29 3b 69 66 28 21 49 28 6b 2c 66 29 29 74 Data Ascii: ;e("freeze");e("preventExtensions");e("seal");var h=0,g=function(k){this.g=(h+=Math.random()+1).toString();if(k){k=H(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};g.prototype.set=function(k,l){if(!c(k))throw Error("i");d(k);if(!I(k,f))t
2024-10-23 23:30:30 UTC	1969	IN	Data Raw: 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 2e 68 61 73 28 6b 29 3f Data Ascii: rn g.value})};c.prototype.forEach=function(g,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};c.prototype[Symbol.iterator]=c.prototype.entries;var d=function(g,k){var l=k&&typeof k;l=="object"\|\|l=="function"?b.has(k)?
2024-10-23 23:30:30 UTC	1969	IN	Data Raw: 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 69 73 4e 61 4e 28 62 29 7d 7d 29 3b 76 61 72 20 66 62 3d 66 62 7c 7c 7b 7d 2c 71 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 67 62 3d 71 2e 5f 46 5f 74 6f 67 67 6c 65 73 7c 7c 5b 5d 2c 68 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 71 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 69 62 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 Data Ascii: n(a){return a?a:function(b){return typeof b==="number"&&isNaN(b)}});var fb=fb\|\|{},q=this\|\|self,gb=q._F_toggles\|\|[],hb=function(a){a=a.split(".");for(var b=q,c=0;c<a.length;c++)if(b=b[a[c]],b==null)return null;return b},ib="closure_uid_"+(Math.random()*1E9
2024-10-23 23:30:30 UTC	1969	IN	Data Raw: 65 78 74 5f 5f 39 38 34 33 38 32 3d 7b 7d 29 3b 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 2e 73 65 76 65 72 69 74 79 3d 62 7d 3b 76 61 72 20 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 3d 63 7c 7c 71 3b 76 61 72 20 64 3d 63 2e 6f 6e 65 72 72 6f 72 2c 65 3d 21 21 62 3b 63 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 2c 67 2c 6b 2c 6c 29 7b 64 26 26 64 28 66 2c 68 2c 67 2c 6b 2c 6c 29 3b 61 28 7b 6d 65 73 73 61 67 65 3a 66 2c 66 69 6c 65 4e 61 6d 65 3a 68 2c 6c 69 6e 65 3a 67 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 67 2c 62 61 3a 6b 2c 65 72 72 6f 72 3a 6c 7d 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 68 62 Data Ascii: ext__984382={});a.__closure__error__context__984382.severity=b};var qb=function(a,b,c){c=c\|\|q;var d=c.onerror,e=!!b;c.onerror=function(f,h,g,k,l){d&&d(f,h,g,k,l);a({message:f,fileName:h,line:g,lineNumber:g,ba:k,error:l});return e}},tb=function(a){var b=hb
2024-10-23 23:30:30 UTC	1969	IN	Data Raw: 72 2c 5b 5d 29 29 3b 72 65 74 75 72 6e 20 62 7d 2c 77 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 69 66 28 61 61 28 62 2c 61 29 3e 3d 30 29 63 2e 70 75 73 68 28 22 5b 2e 2e 2e 63 69 72 63 75 6c 61 72 20 72 65 66 65 72 65 6e 63 65 2e 2e 2e 5d 22 29 3b 65 6c 73 65 20 69 66 28 61 26 26 62 2e 6c 65 6e 67 74 68 3c 0a 35 30 29 7b 63 2e 70 75 73 68 28 73 62 28 61 29 2b 22 28 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 61 2e 61 72 67 75 6d 65 6e 74 73 2c 65 3d 30 3b 64 26 26 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 65 3e 30 26 26 63 2e 70 75 73 68 28 22 2c 20 22 29 3b 76 61 72 20 66 3d 64 5b 65 5d 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 66 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 66 3d 66 3f 22 6f 62 6a 65 63 74 22 3a Data Ascii: r,[]));return b},wb=function(a,b){var c=[];if(aa(b,a)>=0)c.push("[...circular reference...]");else if(a&&b.length<50){c.push(sb(a)+"(");for(var d=a.arguments,e=0;d&&e<d.length;e++){e>0&&c.push(", ");var f=d[e];switch(typeof f){case "object":f=f?"object":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49781	142.250.185.110	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:30:31 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 23:30:31 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 23:30:31 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49782	142.250.185.110	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:30:31 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 23:30:31 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 23:30:31 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49787	142.250.185.110	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:30:32 UTC	1328	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 522 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ad1xLCq2hXZEXS2b_w81-bXIw0Wt0kgpusZ1eKBrl5n5rMqKZLGCNP4gFCaXTPm3raifO-xp4esAYH9bwGtPdGVDB-F1Z4xvuJnqAmLFJUxgL5YD3OKy_4oIkL9XJtIjAWle3qozJ4dXf37y3akTitboe3l8ESdOhzCEhp_-DnVZses0AQ
2024-10-23 23:30:32 UTC	522	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 39 37 32 36 32 32 38 39 34 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"32",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1729726228946",null,null,n
2024-10-23 23:30:32 UTC	940	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=NeNmjNSM8UDVvzZm_7t6hs3FIpFJ9gG4pThNiUkx48u2EX5p_6R6gaG_acEJZfifVQoswG75Zcok9_PG_qo0tLAviTTtp2GXM2WYJ-L4D8ZCn5I3dvb8iFyha-4DzYqldJhemgc5UZSOop8CXdanIZ514dn2NUbrCvxFdmOvs0-S_An_StQZp6Z61A; expires=Thu, 24-Apr-2025 23:30:32 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 23:30:32 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 23 Oct 2024 23:30:32 GMT Connection: close Transfer-Encoding: chunked
2024-10-23 23:30:32 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-23 23:30:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49788	142.250.185.110	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:30:32 UTC	1328	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 522 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ad1xLCq2hXZEXS2b_w81-bXIw0Wt0kgpusZ1eKBrl5n5rMqKZLGCNP4gFCaXTPm3raifO-xp4esAYH9bwGtPdGVDB-F1Z4xvuJnqAmLFJUxgL5YD3OKy_4oIkL9XJtIjAWle3qozJ4dXf37y3akTitboe3l8ESdOhzCEhp_-DnVZses0AQ
2024-10-23 23:30:32 UTC	522	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 39 37 32 36 32 32 39 30 36 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"32",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1729726229066",null,null,n
2024-10-23 23:30:32 UTC	940	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=ENIOtz2kh9H8fPbIMcbROWjk4WP-1rY6U-AFmp7cK_QEbxuIa_K2Sf8UF3d8gznd23x3fEuQj1_oQvdmsobAEtdx3avG8B2NdDME0yo-nt0MNZOCS9LhcMLu_Wly69AXxE-v1VdozTBd03fIbQSJyc3PWIS2x43sBPyv3eYOi-b6dCDzwUobR_q4lQ; expires=Thu, 24-Apr-2025 23:30:32 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 23:30:32 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 23 Oct 2024 23:30:32 GMT Connection: close Transfer-Encoding: chunked
2024-10-23 23:30:32 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-23 23:30:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49792	142.250.186.164	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:30:33 UTC	1221	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ad1xLCq2hXZEXS2b_w81-bXIw0Wt0kgpusZ1eKBrl5n5rMqKZLGCNP4gFCaXTPm3raifO-xp4esAYH9bwGtPdGVDB-F1Z4xvuJnqAmLFJUxgL5YD3OKy_4oIkL9XJtIjAWle3qozJ4dXf37y3akTitboe3l8ESdOhzCEhp_-DnVZses0AQ
2024-10-23 23:30:34 UTC	704	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 23:25:55 GMT Expires: Thu, 31 Oct 2024 23:25:55 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 279 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 23:30:34 UTC	674	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-10-23 23:30:34 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv
2024-10-23 23:30:34 UTC	1378	IN	Data Raw: 34 ff 53 a8 34 ff 53 a8 34 ff 56 a9 37 ff b1 d2 9b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 Data Ascii: 4S4S4V7S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT
2024-10-23 23:30:34 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBBF!4I
2024-10-23 23:30:34 UTC	622	IN	Data Raw: 00 00 fe fe fe 26 fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: &$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49795	142.250.186.36	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:30:35 UTC	650	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ENIOtz2kh9H8fPbIMcbROWjk4WP-1rY6U-AFmp7cK_QEbxuIa_K2Sf8UF3d8gznd23x3fEuQj1_oQvdmsobAEtdx3avG8B2NdDME0yo-nt0MNZOCS9LhcMLu_Wly69AXxE-v1VdozTBd03fIbQSJyc3PWIS2x43sBPyv3eYOi-b6dCDzwUobR_q4lQ
2024-10-23 23:30:35 UTC	704	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 23:25:55 GMT Expires: Thu, 31 Oct 2024 23:25:55 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 280 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 23:30:35 UTC	674	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-10-23 23:30:35 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv
2024-10-23 23:30:35 UTC	1378	IN	Data Raw: 34 ff 53 a8 34 ff 53 a8 34 ff 56 a9 37 ff b1 d2 9b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 Data Ascii: 4S4S4V7S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT
2024-10-23 23:30:35 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBBF!4I
2024-10-23 23:30:35 UTC	622	IN	Data Raw: 00 00 fe fe fe 26 fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: &$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49797	142.250.185.110	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:30:38 UTC	1314	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1224 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ENIOtz2kh9H8fPbIMcbROWjk4WP-1rY6U-AFmp7cK_QEbxuIa_K2Sf8UF3d8gznd23x3fEuQj1_oQvdmsobAEtdx3avG8B2NdDME0yo-nt0MNZOCS9LhcMLu_Wly69AXxE-v1VdozTBd03fIbQSJyc3PWIS2x43sBPyv3eYOi-b6dCDzwUobR_q4lQ
2024-10-23 23:30:38 UTC	1224	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 35 38 2c 5b 5b 22 31 37 32 39 37 32 36 32 32 36 30 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],558,[["1729726226000",null,null,nu
2024-10-23 23:30:38 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 23:30:38 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 23:30:38 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-23 23:30:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49799	142.250.185.110	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:01 UTC	1336	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 805 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ENIOtz2kh9H8fPbIMcbROWjk4WP-1rY6U-AFmp7cK_QEbxuIa_K2Sf8UF3d8gznd23x3fEuQj1_oQvdmsobAEtdx3avG8B2NdDME0yo-nt0MNZOCS9LhcMLu_Wly69AXxE-v1VdozTBd03fIbQSJyc3PWIS2x43sBPyv3eYOi-b6dCDzwUobR_q4lQ
2024-10-23 23:31:01 UTC	805	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 39 37 32 36 32 35 39 35 39 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"32",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1729726259591",null,null,n
2024-10-23 23:31:02 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 23:31:02 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 23:31:02 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-23 23:31:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49800	142.250.185.110	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:02 UTC	1297	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1035 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ENIOtz2kh9H8fPbIMcbROWjk4WP-1rY6U-AFmp7cK_QEbxuIa_K2Sf8UF3d8gznd23x3fEuQj1_oQvdmsobAEtdx3avG8B2NdDME0yo-nt0MNZOCS9LhcMLu_Wly69AXxE-v1VdozTBd03fIbQSJyc3PWIS2x43sBPyv3eYOi-b6dCDzwUobR_q4lQ
2024-10-23 23:31:02 UTC	1035	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 64 65 6e 74 69 74 79 66 72 6f 6e 74 65 6e 64 61 75 74 68 75 69 73 65 72 76 65 72 5f 32 30 32 34 31 30 32 30 2e 30 38 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_identityfrontendauthuiserver_20241020.08_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,
2024-10-23 23:31:02 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 23:31:02 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 23:31:02 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-23 23:31:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:05 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:05 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:05 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 89fa8e61-601e-0070-0c14-24a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233105Z-r197bdfb6b4h2vctng0a0nubg80000000a0000000000exwt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:31:05 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 23:31:05 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-23 23:31:05 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-23 23:31:06 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-23 23:31:06 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-23 23:31:06 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-23 23:31:06 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-23 23:31:06 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-23 23:31:06 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-23 23:31:06 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:07 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:08 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:07 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9afce852-e01e-0020-6fef-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233107Z-15b8d89586fxdh48qknu9dqk2g000000025g00000000b2sz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:08 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:07 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233107Z-16849878b78jfqwd1dsrhqg3aw00000006xg00000000n1vk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:08 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:07 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:08 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:07 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: ab85fd93-201e-006e-6bf3-24bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233107Z-r197bdfb6b4t7wszdvrfk02ah4000000089g00000000v4rg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:08 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:07 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:08 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:07 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233107Z-16849878b78rjhv97f3nhawr7s00000006v000000000cq37 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:08 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:07 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:08 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:07 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233107Z-16849878b7842t5ke0k7mzbt3c00000006t0000000005s07 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:08 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:09 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:09 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: b99e46b1-a01e-001e-0499-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233109Z-15b8d89586f42m673h1quuee4s000000027000000000kh9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:09 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:09 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233109Z-16849878b78dsttbr1qw36rxs800000006z0000000006eaw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:09 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:09 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:09 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: bcb88dd7-c01e-0079-47cd-21e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233109Z-16849878b78k46f8kzwxznephs00000006sg00000000e6w8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:09 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:09 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:09 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 13d0e6d2-b01e-0053-47f4-24cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233109Z-15b8d89586fbt6nf34bm5uw08n0000000250000000001xew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:09 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:10 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:10 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233110Z-16849878b78dghrpt8v731n7r400000006wg000000000bbd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:10 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:10 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:10 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 1ae852e8-d01e-008e-29f5-24387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233110Z-15b8d89586f8l5961kfst8fpb000000008f000000000akd6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:10 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:10 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 8c2da7e0-f01e-003c-2116-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233110Z-r197bdfb6b4vlqfn9hfre6k1s80000000bp000000000gnc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:10 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6ca7d158-d01e-0014-15ac-21ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233110Z-16849878b7842t5ke0k7mzbt3c00000006r000000000du0s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:10 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 43877b29-f01e-005d-36f3-2413ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233110Z-r197bdfb6b4qpk6v9629ad4b5s0000000bkg000000003kn4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:11 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:11 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233111Z-16849878b787psctgubawhx7k800000006rg00000000ae0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:11 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:11 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:11 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 847e2871-001e-0079-66e3-2112e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233111Z-16849878b787c9z7hb8u9yysp00000000710000000006bsr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:11 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:11 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233111Z-16849878b78q4pnrt955f8nkx800000006q000000000rzvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:11 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:11 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:11 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: adf44397-501e-00a3-4c15-24c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233111Z-r197bdfb6b4b582bwynewx7zgn0000000bgg00000000paes x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:11 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:11 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:11 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:11 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ec40f21c-901e-0067-494d-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233111Z-16849878b785jsrm4477mv3ezn00000006sg00000000rsyd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:11 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49824	142.250.185.110	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:12 UTC	1336	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 749 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ENIOtz2kh9H8fPbIMcbROWjk4WP-1rY6U-AFmp7cK_QEbxuIa_K2Sf8UF3d8gznd23x3fEuQj1_oQvdmsobAEtdx3avG8B2NdDME0yo-nt0MNZOCS9LhcMLu_Wly69AXxE-v1VdozTBd03fIbQSJyc3PWIS2x43sBPyv3eYOi-b6dCDzwUobR_q4lQ
2024-10-23 23:31:12 UTC	749	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 39 37 32 36 32 36 39 39 35 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"32",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1729726269951",null,null,n
2024-10-23 23:31:12 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 23:31:12 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 23:31:12 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-23 23:31:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:12 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233112Z-16849878b788tnsxzb2smucwdc00000006v000000000s0fv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:12 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49825	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:12 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:12 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: c288f504-201e-0000-75f2-24a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233112Z-r197bdfb6b4cz6xrsdncwtgzd40000000nng000000009g6q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:12 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:12 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:12 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9956b93e-101e-0017-0e1a-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233112Z-r197bdfb6b4t7wszdvrfk02ah400000008d000000000dtf1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:12 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:12 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 2ab53e8b-001e-0066-7ef2-24561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233112Z-r197bdfb6b4kkm8440c459r6k800000000xg00000000n6mx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:12 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:12 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:12 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:12 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b38717f8-301e-0020-78f3-246299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233112Z-15b8d89586f6nn8zquf2vw6t5400000003x000000000s69m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:12 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:13 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:13 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233113Z-16849878b78z5q7jpbgf6e9mcw00000007100000000062ap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:13 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:13 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233113Z-16849878b78dsttbr1qw36rxs800000006xg00000000cnpu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:13 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 80263b1c-901e-002a-38ad-247a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233113Z-15b8d89586fhl2qtatrz3vfkf0000000040000000000d52f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:13 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:13 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233113Z-16849878b7862vlcc7m66axrs000000006u000000000sf9s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:13 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:13 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:13 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: b11d926e-c01e-00a2-50f4-242327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233113Z-r197bdfb6b4gdlhqw6kbe0ekvs00000009zg000000004rs1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:13 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:14 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:14 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 999b7e79-701e-001e-6bf4-24f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233114Z-r197bdfb6b4cz6xrsdncwtgzd40000000nmg00000000brmm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:31:14 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:14 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 759c8b5d-301e-003f-27f2-24266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233114Z-15b8d89586fvk4kmwqg9fgbkn800000002d000000000fduz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:31:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:14 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:14 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233114Z-16849878b784cpcc2dr9ch74ng000000072g000000001ezp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:14 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:14 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:14 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233114Z-16849878b789m94j7902zfvfr000000006wg000000000fqv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:14 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:14 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:14 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: af8b8727-001e-00a2-18f5-24d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233114Z-15b8d89586fsx9lfqmgrbzpgmg0000000dr0000000001np5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:14 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:15 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:15 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2d861f62-501e-0064-3bf5-241f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233115Z-15b8d89586f2hk28h0h6zye26c00000000hg00000000hw6r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:15 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:15 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:15 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 221e1266-901e-0016-4cfc-24efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233115Z-r197bdfb6b49q495mwyebb3r6s00000009v000000000k1rk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:31:15 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:15 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:15 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: b13276b3-c01e-00a2-52fc-242327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233115Z-r197bdfb6b4b582bwynewx7zgn0000000bh000000000nf1n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:15 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:15 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: be98e2c6-601e-0001-2b87-21faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233115Z-16849878b78hz7zj8u0h2zng14000000071g000000005hwv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:15 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:15 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:15 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 13d0f17b-b01e-0053-80f4-24cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233115Z-15b8d89586f42m673h1quuee4s000000027g00000000fptq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:15 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:15 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:15 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 44f017bc-601e-000d-6df3-242618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233115Z-15b8d89586frzkk2umu6w8qnt80000000d9g00000000ngyu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:16 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:15 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:15 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 9658a421-401e-008c-7ff3-2486c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233115Z-15b8d89586ffsjj9qb0gmb1stn00000002eg000000004c71 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:16 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:15 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:15 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 40ca5ebb-901e-0048-7827-21b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233115Z-16849878b78dkr6tqerbnpg1zc0000000700000000003ar4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:16 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:15 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:15 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 7a637aca-b01e-0002-3c05-221b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233115Z-16849878b78s2lqfdex4tmpp7800000006z0000000006nht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:16 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:16 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:16 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233116Z-16849878b78dghrpt8v731n7r400000006vg000000003kxn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:16 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49852	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:16 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:16 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233116Z-16849878b7842t5ke0k7mzbt3c00000006m000000000y7t3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:16 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:16 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233116Z-16849878b78dsttbr1qw36rxs800000006zg0000000066mg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:16 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:16 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233116Z-16849878b78q4pnrt955f8nkx800000006sg00000000ehfx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:16 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:16 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:17 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:16 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 7082da1f-601e-003d-073e-226f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233116Z-16849878b782558xg5kpzay6es00000006rg00000000vnpt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:17 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:16 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:17 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94ed83ec-801e-0083-4bf2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233116Z-15b8d89586fs9clcgrr6f2d6vg00000000t000000000n00k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:31:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:17 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 33ade019-101e-0028-30f5-248f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233117Z-15b8d89586fhl2qtatrz3vfkf0000000041g00000000818h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:17 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:17 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:17 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 4c87ede1-d01e-0065-6b9c-21b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233117Z-16849878b78rjhv97f3nhawr7s00000006u000000000h9bu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:17 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7fcc546d-701e-001e-80a3-21f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233117Z-16849878b784cpcc2dr9ch74ng0000000710000000007dkb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:17 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:17 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 100b0a78-f01e-0003-754e-224453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233117Z-16849878b78s2lqfdex4tmpp7800000006xg00000000bw8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:17 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:17 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14f65908-801e-008f-32d6-202c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233117Z-16849878b78dsttbr1qw36rxs800000006y0000000009n0b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:18 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6113d354-c01e-00a1-29f4-247e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233118Z-15b8d89586f4zwgbz365q03b0c0000000dt0000000000thn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:31:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:18 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:18 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: acb2ef9b-e01e-001f-1f33-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233118Z-16849878b78lhh9t0fb3392enw00000006v0000000005qgr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:18 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:18 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:18 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 7cfbc72c-d01e-0082-6d55-22e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233118Z-16849878b787sbpl0sv29sm89s00000006w000000000thsp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:18 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:18 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:18 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 217788b5-401e-0016-11a2-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233118Z-16849878b78z5q7jpbgf6e9mcw000000071g000000004ud1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:18 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:18 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: d4a93cd8-001e-008d-65f5-24d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233118Z-15b8d89586f8l5961kfst8fpb000000008dg00000000ew8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:19 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:19 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 6a9fe61e-e01e-001f-0a16-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233119Z-r197bdfb6b4tq6ldv3s2dcykm800000000ng00000000p46e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:19 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49869	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:19 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:19 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 8b572347-501e-008c-80f2-21cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233119Z-16849878b78q4pnrt955f8nkx800000006w0000000001wd3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49868	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:19 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:19 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 143ffe56-901e-0067-3a0b-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233119Z-16849878b789m94j7902zfvfr000000006sg00000000esue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:19 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:19 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: c0884099-101e-0046-3a40-2291b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233119Z-16849878b789m94j7902zfvfr000000006wg000000000fxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:19 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:19 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:19 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: ac69ef67-e01e-001f-7714-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233119Z-16849878b78z5q7jpbgf6e9mcw000000070g0000000094pr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49872	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:20 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:20 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: fffa9526-501e-0035-49f2-24c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233120Z-r197bdfb6b4b582bwynewx7zgn0000000bk000000000guag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:31:20 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:20 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: efcdf68a-a01e-0084-49f2-249ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233120Z-15b8d89586fbt6nf34bm5uw08n00000002400000000052nq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49874	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:20 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:20 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: fa910cef-e01e-003c-72dd-21c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233120Z-16849878b78jfqwd1dsrhqg3aw0000000720000000003kcw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:20 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49875	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:20 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:20 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 931f542e-301e-000c-75f2-21323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233120Z-16849878b78rjhv97f3nhawr7s00000006yg0000000012uv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:20 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49876	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:20 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233120Z-16849878b782h9tt5z2wa5rfxg00000006xg00000000414u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49877	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:21 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:21 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 135f94f0-d01e-002b-2a55-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233121Z-16849878b78k46f8kzwxznephs00000006wg000000000gk0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:21 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49878	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:21 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: d2bab0c5-801e-0078-24f3-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233121Z-r197bdfb6b4sn8wg20e97vn7ps0000000ndg00000000e9gt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49879	13.107.246.60	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:21 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 497f5b85-801e-00a3-28f2-247cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233121Z-r197bdfb6b429k2s6br3k49qn4000000044g0000000056du x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49880	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:21 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:21 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c52d6895-f01e-001f-0bd3-205dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233121Z-16849878b78dghrpt8v731n7r400000006v00000000056qf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:21 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49881	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:21 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233121Z-16849878b788tnsxzb2smucwdc00000006wg00000000fsg7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49882	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:22 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:22 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233122Z-16849878b78c5zx4gw8tcga1b400000006sg00000000euqw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:22 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49883	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:22 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:22 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 26247a46-101e-000b-3298-245e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233122Z-15b8d89586fmhkw4gksnr1w3ds0000000dgg00000000g3vu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:22 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49884	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:22 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:22 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233122Z-16849878b78fmrkt2ukpvh9wh400000006t000000000r7n4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:22 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49885	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:22 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:22 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f09c1d25-d01e-0082-52f3-21e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233122Z-16849878b787sbpl0sv29sm89s000000072g000000001h58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:22 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49886	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:22 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:22 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233122Z-16849878b782h9tt5z2wa5rfxg00000006w00000000093zv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:22 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49887	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:22 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:23 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: aaf6fada-701e-0053-683a-223a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233123Z-16849878b78z5q7jpbgf6e9mcw00000006yg00000000gmmn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:23 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49888	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:23 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:23 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:23 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 9c2fdade-c01e-002b-16f2-246e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233123Z-15b8d89586f8l5961kfst8fpb000000008k0000000001qqg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:31:23 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49889	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:23 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:23 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 7edb8da2-f01e-0099-33f3-249171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233123Z-15b8d89586f42m673h1quuee4s00000002b00000000043q7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:23 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49890	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:23 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:23 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c29108f7-201e-0000-1ff5-24a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233123Z-r197bdfb6b49k6rsrbz098tg80000000040000000000hye0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:23 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49891	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:23 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:23 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 7902e772-301e-0000-2ff3-24eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233123Z-15b8d89586fqckbz0ssbuzzp1n000000019g00000000h9v4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:23 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49893	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:23 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:24 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e3e5e386-001e-0014-4ffc-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233124Z-r197bdfb6b49k6rsrbz098tg80000000042000000000cb3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:24 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49894	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:23 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:23 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 2abba737-001e-0066-7df4-24561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233123Z-15b8d89586fqj7k5uht6e8nnew0000000d4g000000005cx2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:24 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49895	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:23 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:24 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 53594826-c01e-0082-6cf3-24af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233124Z-r197bdfb6b49q495mwyebb3r6s00000009vg00000000g142 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:24 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49896	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:23 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:24 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 67684ae8-901e-0016-58ee-21efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233124Z-16849878b782558xg5kpzay6es00000006sg00000000rspc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:24 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49892	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:24 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:24 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 12a0180a-401e-00a3-48f5-248b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233124Z-r197bdfb6b4gdlhqw6kbe0ekvs00000009w000000000gmc4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:24 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49898	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:24 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:24 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 84d8b792-101e-008e-7ffc-24cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233124Z-15b8d89586flspj6y6m5fk442w00000003yg000000006scx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:24 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49899	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:24 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:24 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 7898325b-901e-00ac-11c9-20b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233124Z-16849878b78dkr6tqerbnpg1zc00000006x000000000fpe2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:25 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49900	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:24 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:24 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: b5c58150-601e-0070-04f2-24a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233124Z-r197bdfb6b4lkrtc7na2dkay28000000026g00000000keac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:24 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49897	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:24 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:24 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 8d011c5a-801e-0047-22f7-217265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233124Z-16849878b78z5q7jpbgf6e9mcw0000000720000000003sta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:25 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49901	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:24 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:25 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:24 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233124Z-16849878b78dkr6tqerbnpg1zc00000006u000000000td5x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:25 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49902	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:25 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:25 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 31e4fe8c-301e-0033-38f2-21fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233125Z-16849878b78bkvbz1ry47zvsas00000006t000000000xbh3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:25 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49903	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:25 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:25 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2a979a5c-f01e-003f-77f7-21d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233125Z-16849878b78c2tmb7nhatnd68s00000006zg000000004pw5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:25 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49905	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:25 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:25 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: cbb0b495-901e-005b-56e4-212005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233125Z-16849878b78fmrkt2ukpvh9wh400000006u000000000kk8w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:25 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49906	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:25 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e4dfd9e9-c01e-00ad-24f5-24a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233125Z-15b8d89586fx2hlt035xdehq580000000dn000000000e2uv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49904	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:25 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:25 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:25 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: e092e42d-501e-0035-603a-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233125Z-16849878b78dkr6tqerbnpg1zc00000006xg00000000c0v9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:25 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49907	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:26 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:26 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233126Z-16849878b785jsrm4477mv3ezn00000006w000000000a6wz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:26 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49908	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:26 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:26 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233126Z-16849878b787c9z7hb8u9yysp000000006zg00000000cgs3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:26 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49909	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:26 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:26 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:26 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 4c920d0e-c01e-008d-4cca-202eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233126Z-16849878b789m94j7902zfvfr000000006wg000000000g7z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:26 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49910	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:26 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:26 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:26 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 9a0db76d-d01e-0017-4396-25b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233126Z-16849878b78rjhv97f3nhawr7s00000006w0000000009sf1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:31:26 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49911	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:26 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:26 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:26 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 4e335343-a01e-000d-7cf4-24d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233126Z-r197bdfb6b4h2vctng0a0nubg800000009wg00000000u27s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:31:26 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49912	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:27 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:27 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 23ba238a-801e-0015-10f3-24f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233127Z-r197bdfb6b4sn8wg20e97vn7ps0000000nkg000000000gzz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:27 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49913	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:27 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:27 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 714dabad-d01e-0065-43fc-24b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233127Z-r197bdfb6b487xlkrahepdse5000000008b000000000hzbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:27 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49914	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:27 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:27 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:27 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 2192cf97-401e-0016-59aa-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233127Z-16849878b78s2lqfdex4tmpp7800000006zg0000000049v5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:27 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49915	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:27 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:27 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: fbe9264b-c01e-0046-04f3-242db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233127Z-r197bdfb6b4h2vctng0a0nubg800000009yg00000000htfx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:27 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49916	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:27 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:27 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:27 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233127Z-16849878b78k46f8kzwxznephs00000006w00000000029a8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:27 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49918	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:28 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:28 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 62a19e75-a01e-0032-1bf3-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233128Z-r197bdfb6b46gt25anfa5gg2fw00000002e0000000006b3v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:28 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49917	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:28 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:28 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: d2bdf8af-801e-0078-25f4-24bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233128Z-r197bdfb6b49q495mwyebb3r6s00000009zg000000004aku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:28 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49920	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:28 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:28 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c944a0c5-101e-005a-7340-22882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233128Z-16849878b7842t5ke0k7mzbt3c00000006q000000000hnkn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:28 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49921	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:28 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:28 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e014a2e3-501e-0035-060b-22c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233128Z-16849878b788tnsxzb2smucwdc00000006w000000000h56a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:28 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49922	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:28 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:28 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 74c47345-e01e-00aa-3afd-24ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233128Z-15b8d89586fst84k5f3z220tec0000000deg00000000pdys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:28 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49923	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:29 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:29 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: bfa31533-301e-0020-4b7f-256299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233129Z-15b8d89586fmhkw4gksnr1w3ds0000000dpg000000000qpr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:29 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49924	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:29 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:29 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 8b787db3-c01e-0046-5018-242db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233129Z-r197bdfb6b4vlqfn9hfre6k1s80000000bqg00000000an8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:29 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49925	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:29 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:29 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 9a8cc640-601e-0032-1ef5-24eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233129Z-15b8d89586f989rks44whx5v7s0000000dd0000000001fdv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:29 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49926	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:29 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:29 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: f9013c52-001e-0079-5ef2-2412e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233129Z-15b8d89586fx2hlt035xdehq580000000drg000000002yxg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:29 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49927	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:29 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:29 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: af8bbd6e-001e-00a2-3df5-24d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233129Z-15b8d89586flzzks5bs37v2b9000000002cg00000000hwv0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:29 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49928	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:30 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:30 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 44e5e715-301e-001f-6416-24aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233130Z-15b8d89586f8l5961kfst8fpb000000008h0000000004p77 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:30 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49930	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:30 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:30 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6e18d5c3-a01e-00ab-48f4-249106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233130Z-r197bdfb6b46gt25anfa5gg2fw000000029000000000v2ys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:30 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49929	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:30 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:30 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: f88de462-b01e-0001-44f2-2446e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233130Z-r197bdfb6b42sc4ddemybqpm140000000nk00000000086sw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:30 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49931	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:30 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:30 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:30 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 697bb720-201e-0071-0781-25ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233130Z-16849878b785g992cz2s9gk35c00000006u000000000uh2a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:30 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49932	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:30 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:30 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 264b7e39-001e-0028-804e-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233130Z-16849878b78hz7zj8u0h2zng140000000720000000003c94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:30 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49933	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:31 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:31 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:31 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3d4cb055-601e-0097-01e5-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233131Z-16849878b78rjhv97f3nhawr7s00000006wg000000007m4n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:31 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49934	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:31 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:31 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 53cea195-601e-0084-75f3-246b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233131Z-r197bdfb6b4kkm8440c459r6k8000000010000000000bhby x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:31 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49935	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:31 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:31 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: efcf68a2-a01e-0084-11f2-249ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233131Z-15b8d89586fwzdd8urmg0p1ebs00000008fg000000004pwd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:31 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49936	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:31 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:31 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 07658eab-b01e-005c-1e14-224c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233131Z-16849878b785f8wh85a0w3ennn00000006s000000000tvzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:31 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49937	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:31 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:31 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 1e800eab-b01e-001e-7ff5-240214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233131Z-15b8d89586f8l5961kfst8fpb000000008dg00000000ex8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:31 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49939	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:31 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:31 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 4bb44360-d01e-005a-0414-227fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233131Z-16849878b78q4pnrt955f8nkx800000006rg00000000krey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49940	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:32 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:32 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 88a9635a-401e-005b-7585-219c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233132Z-16849878b787c9z7hb8u9yysp000000006yg00000000g2be x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49941	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:32 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:32 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b1eeebb-201e-0051-0fab-217340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233132Z-16849878b786vsxz21496wc2qn00000006vg00000000w0cb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:32 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49942	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:32 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:32 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: ba3ed362-301e-0099-2f30-216683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233132Z-16849878b78p4hmjy4vha5ddqw00000006wg000000000zgq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:32 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49943	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:32 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:32 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 10ca92f3-d01e-008e-1b31-22387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233132Z-16849878b78rjhv97f3nhawr7s00000006x0000000005qdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:32 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49945	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:31:32 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:31:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:31:32 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: aba5bc6a-e01e-0003-59e5-210fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233132Z-16849878b78dkr6tqerbnpg1zc000000070g00000000166a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:31:32 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Target ID:	0
Start time:	19:30:04
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:30:08
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1904,i,11327631970205537496,6943746547395598485,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:30:11
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	19:30:28
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6020 --field-trial-handle=1904,i,11327631970205537496,6943746547395598485,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	19:30:29
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4792 --field-trial-handle=1904,i,11327631970205537496,6943746547395598485,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Windows Analysis Report
https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10