Edit tour

Windows Analysis Report
https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10

Overview

General Information

Sample URL:	https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10
Analysis ID:	1540705
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

HTML body contains password input but no form action

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3272 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1948,i,14114869393493894736,14263863744638694507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7160 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5524 --field-trial-handle=1948,i,14114869393493894736,14263863744638694507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5288 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5436 --field-trial-handle=1948,i,14114869393493894736,14263863744638694507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-115377987&timestamp=1729726492797
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-115377987&timestamp=1729726492797
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-115377987&timestamp=1729726492797
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-115377987&timestamp=1729726492797
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: Iframe src: /_/bscframe

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: No favicon

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&service=dynamite&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1123548097%3A1729726480763284&ddm=0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:55397 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:55445 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:55459 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:55594 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:55388 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: global traffic	HTTP traffic detected: GET /dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10 HTTP/1.1Host: chat.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6n1oRnYwED+n9ch&MD=sUpoZ3L2 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-115377987&timestamp=1729726492797 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=Ko7fyT-LLfWIj9ktg3dzrPB1UuD_9ZuOypuHCczly1jxhz212NvnCvvpU0sAqKfY_s78BCl60_7VT5QqNZKAMA6MdQDeZYdGPIFtPS_JkgCdYY5RxzBzGQjFWLP-AJBe_hAlbD7ZllouAXoURnhg3dy3ezSzASpUjjTltY6kiG6sVtKxcYXosCr8sFw
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6n1oRnYwED+n9ch&MD=sUpoZ3L2 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: chromecache_153.2.dr

String found in binary or memory: _.qq(p)+"/familylink/privacy/notice/embedded?langCountry="+_.qq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.qq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.qq(_.zq(c))+"&hl="+_.qq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.qq(m)+"/chromebook/termsofservice.html?languageCode="+_.qq(d)+"&regionCode="+_.qq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: chat.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 522sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"Content-Type: application/x-www-form-urlencoded;charset=UTF-8sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"X-Goog-AuthUser: 0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://accounts.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=oo9OJTZ-hq3Wyk66-uiVCnP4yVz8CG7GM2CooIMbQE1WIxG4C0Yq5zdoxf0A0jKZOU7FrUKVoYLe_2hzQkn8hZFXN2WGxS0Is5HLC4Txi-wD_uGdfPHXUfxa0YJavHn__AshuVLcMabGdbO6F0WDAewsX_ahumOmKxi-D_n_2qb2SZWrnkQ

Source: chromecache_153.2.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_153.2.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: chromecache_144.2.dr, chromecache_129.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_134.2.dr, chromecache_153.2.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
Source: chromecache_153.2.dr	String found in binary or memory: https://families.google.com/intl/
Source: chromecache_129.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_129.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_134.2.dr, chromecache_153.2.dr	String found in binary or memory: https://g.co/recover
Source: chromecache_153.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_134.2.dr, chromecache_153.2.dr	String found in binary or memory: https://play.google.com/work/enroll?identifier=
Source: chromecache_134.2.dr, chromecache_153.2.dr	String found in binary or memory: https://play.google/intl/
Source: chromecache_153.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_153.2.dr	String found in binary or memory: https://policies.google.com/privacy/additional
Source: chromecache_134.2.dr, chromecache_153.2.dr	String found in binary or memory: https://policies.google.com/privacy/google-partners
Source: chromecache_134.2.dr, chromecache_153.2.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: chromecache_134.2.dr, chromecache_153.2.dr	String found in binary or memory: https://policies.google.com/technologies/location-data
Source: chromecache_134.2.dr, chromecache_153.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_134.2.dr, chromecache_153.2.dr	String found in binary or memory: https://policies.google.com/terms/location
Source: chromecache_134.2.dr, chromecache_153.2.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_darkmode_1x.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_silent_tap_yes_darkmode.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes_darkmode.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_dark_v2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_v2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_dark_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_darkmode_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_darkmode_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_darkmode_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_darkmode_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_darkmode_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_144.2.dr, chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/who_will_be_using_this_device.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_dark_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_v1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_dark_v1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_v1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_dark_v1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_v1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_dark_0.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_dark_2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_dark_2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_dark_2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_dark_2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_dark_3.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_dark_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_dark_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_dark_2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_dark_1.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_dark_2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_dark_v2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_v2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set_darkmode.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_dark_v2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_v2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_144.2.dr, chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space_dark.png
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2_dark.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess.svg
Source: chromecache_129.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess_dark.svg
Source: chromecache_134.2.dr, chromecache_153.2.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_134.2.dr, chromecache_153.2.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_153.2.dr	String found in binary or memory: https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
Source: chromecache_144.2.dr, chromecache_129.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_134.2.dr, chromecache_153.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_153.2.dr	String found in binary or memory: https://www.google.com/intl/
Source: chromecache_129.2.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_129.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_129.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_129.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_129.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_129.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_134.2.dr, chromecache_153.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: chromecache_134.2.dr, chromecache_153.2.dr	String found in binary or memory: https://www.youtube.com/t/terms?chromeless=1&hl=
Source: chromecache_134.2.dr, chromecache_153.2.dr	String found in binary or memory: https://youtube.com/t/terms?gl=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 55521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 55555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55613 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55397
Source: unknown	Network traffic detected: HTTP traffic on port 55465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55427 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55599 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 55592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55604 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55470 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55627
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55628
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55629
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55623
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55624
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55626
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55620
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55500
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55621
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55622
Source: unknown	Network traffic detected: HTTP traffic on port 55458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55519
Source: unknown	Network traffic detected: HTTP traffic on port 55446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55514
Source: unknown	Network traffic detected: HTTP traffic on port 55549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55630
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55631
Source: unknown	Network traffic detected: HTTP traffic on port 55503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55512
Source: unknown	Network traffic detected: HTTP traffic on port 55630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55529
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55526
Source: unknown	Network traffic detected: HTTP traffic on port 55527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55530
Source: unknown	Network traffic detected: HTTP traffic on port 55482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55595 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55537
Source: unknown	Network traffic detected: HTTP traffic on port 55561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55531
Source: unknown	Network traffic detected: HTTP traffic on port 55618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55534
Source: unknown	Network traffic detected: HTTP traffic on port 55459 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55541
Source: unknown	Network traffic detected: HTTP traffic on port 55434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55609
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55605
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55606
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55607
Source: unknown	Network traffic detected: HTTP traffic on port 55472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55608
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55601
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55602
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55603
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55604
Source: unknown	Network traffic detected: HTTP traffic on port 55504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55600
Source: unknown	Network traffic detected: HTTP traffic on port 55582 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55616
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55617
Source: unknown	Network traffic detected: HTTP traffic on port 55444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55619
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55612
Source: unknown	Network traffic detected: HTTP traffic on port 55526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55613
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55615
Source: unknown	Network traffic detected: HTTP traffic on port 55631 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55610
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55611
Source: unknown	Network traffic detected: HTTP traffic on port 55571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55449 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55469
Source: unknown	Network traffic detected: HTTP traffic on port 55564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55465
Source: unknown	Network traffic detected: HTTP traffic on port 55541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55587
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55467
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55468
Source: unknown	Network traffic detected: HTTP traffic on port 55506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55589
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55472
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55593
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55474
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55475
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55590
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55470
Source: unknown	Network traffic detected: HTTP traffic on port 55490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55591
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55471
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55592
Source: unknown	Network traffic detected: HTTP traffic on port 55609 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55576 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55598
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55599
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55483
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55484
Source: unknown	Network traffic detected: HTTP traffic on port 55518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55485
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55486
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55480
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55481
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55482
Source: unknown	Network traffic detected: HTTP traffic on port 55587 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55487
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55488
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55489
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55495
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55496
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55490
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55491
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55492
Source: unknown	Network traffic detected: HTTP traffic on port 55456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55493
Source: unknown	Network traffic detected: HTTP traffic on port 55479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55610 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55499
Source: unknown	Network traffic detected: HTTP traffic on port 55505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55621 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55427
Source: unknown	Network traffic detected: HTTP traffic on port 55468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55548
Source: unknown	Network traffic detected: HTTP traffic on port 55611 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55428
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55422
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55552
Source: unknown	Network traffic detected: HTTP traffic on port 55597 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55480 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55551 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55438
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55559
Source: unknown	Network traffic detected: HTTP traffic on port 55563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55432
Source: unknown	Network traffic detected: HTTP traffic on port 55528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55553
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55554
Source: unknown	Network traffic detected: HTTP traffic on port 55397 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55434
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55555
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55560
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55561
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55441
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55563
Source: unknown	Network traffic detected: HTTP traffic on port 55457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55585 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55447 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55447
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55569
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55449
Source: unknown	Network traffic detected: HTTP traffic on port 55562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55444
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55445
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55446
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55450
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55571
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55451
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55452
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55453
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55570
Source: unknown	Network traffic detected: HTTP traffic on port 55492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55469 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55458
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55579
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55459
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55454
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55575
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55455
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55576
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55456
Source: unknown	Network traffic detected: HTTP traffic on port 55540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55577
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55457
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55461
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55582
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55462
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55463
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55585
Source: unknown	Network traffic detected: HTTP traffic on port 55596 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55580
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55460
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55581

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:55397 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:55445 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:55459 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:55594 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@27/44@14/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1948,i,14114869393493894736,14263863744638694507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5524 --field-trial-handle=1948,i,14114869393493894736,14263863744638694507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5436 --field-trial-handle=1948,i,14114869393493894736,14263863744638694507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1948,i,14114869393493894736,14263863744638694507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5524 --field-trial-handle=1948,i,14114869393493894736,14263863744638694507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5436 --field-trial-handle=1948,i,14114869393493894736,14263863744638694507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://play.google/intl/	0%	URL Reputation	safe
https://families.google.com/intl/	0%	URL Reputation	safe
https://policies.google.com/technologies/location-data	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://policies.google.com/privacy/google-partners	0%	URL Reputation	safe
https://policies.google.com/terms/service-specific	0%	URL Reputation	safe
https://g.co/recover	0%	URL Reputation	safe
https://policies.google.com/privacy/additional	0%	URL Reputation	safe
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	0%	URL Reputation	safe
https://policies.google.com/technologies/cookies	0%	URL Reputation	safe
https://policies.google.com/terms	0%	URL Reputation	safe
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	0%	URL Reputation	safe
https://support.google.com/accounts?hl=	0%	URL Reputation	safe
https://policies.google.com/terms/location	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://support.google.com/accounts?p=new-si-ui	0%	URL Reputation	safe
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www3.l.google.com	142.250.181.238	true	false	unknown
play.google.com	142.250.186.142	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.186.100	true	false	unknown
chat.google.com	142.250.185.206	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
accounts.youtube.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10	false	unknown
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	unknown
https://www.google.com/favicon.ico	false	unknown
https://play.google.com/log?hasfast=true&authuser=0&format=json	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://play.google/intl/	chromecache_134.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://families.google.com/intl/	chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://youtube.com/t/terms?gl=	chromecache_134.2.dr, chromecache_153.2.dr	false		unknown
https://policies.google.com/technologies/location-data	chromecache_134.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/	chromecache_153.2.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_144.2.dr, chromecache_129.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy/google-partners	chromecache_134.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/work/enroll?identifier=	chromecache_134.2.dr, chromecache_153.2.dr	false		unknown
https://policies.google.com/terms/service-specific	chromecache_134.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://g.co/recover	chromecache_134.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy/additional	chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/technologies/cookies	chromecache_134.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms	chromecache_134.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_144.2.dr, chromecache_129.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_134.2.dr, chromecache_153.2.dr	false		unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_153.2.dr	false		unknown
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_134.2.dr, chromecache_153.2.dr	false		unknown
https://support.google.com/accounts?hl=	chromecache_134.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms/location	chromecache_134.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy	chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/accounts?p=new-si-ui	chromecache_134.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	chromecache_134.2.dr, chromecache_153.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.206	chat.google.com	United States	15169	GOOGLEUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
142.250.181.238	www3.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.142	play.google.com	United States	15169	GOOGLEUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
172.217.18.110	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540705
Start date and time:	2024-10-24 01:33:34 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@27/44@14/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 64.233.184.84, 172.217.23.110, 34.104.35.123, 142.250.185.227, 172.217.16.131, 142.250.181.234, 142.250.185.138, 172.217.16.138, 142.250.185.74, 142.250.186.42, 142.250.186.138, 142.250.185.234, 172.217.18.10, 142.250.186.74, 142.250.186.106, 142.250.184.234, 216.58.212.170, 216.58.206.74, 172.217.16.202, 142.250.185.202, 142.250.185.170, 93.184.221.240, 142.250.184.227, 13.95.31.18, 192.229.221.95, 108.177.15.84, 40.69.42.241, 216.58.206.67, 142.251.168.84, 64.233.167.84
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10

Input	Output
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&se Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&se Model: claude-3-haiku-20240307	```json { "brands": [ "Google" ] }
	```json { "brands": [ "Google" ] }
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&se Model: gpt-4o	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are typical for a Google account login page." ], "riskscore": 1}
URL: accounts.google.com Brands: Google Input Fields: Email or phone
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&se Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Enter an email or phone number", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or phone" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&se Model: claude-3-haiku-20240307	```json { "brands": [ "Google" ] }
	```json { "brands": [ "Google" ] }
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchat.google.com%2Fdm%2Fvihz_MAAAAE%2FKpEHZPfP5fA%2FKpEHZPfP5fA%3Fcls%3D10&ifkv=ARpgrqfbu1xxVa2781FVVGRBjWM5Ublqyn6OuhVzybd1JBqGrDvCbksY3Wn5yDLPC1WmWh2sbBQJHg&osid=1&passive=1209600&se Model: gpt-4o	```json{ "legit_domain": "google.com", "classification": "wellknown", "reasons": [ "The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are typical for a login page associated with Google services." ], "riskscore": 1}
URL: accounts.google.com Brands: Google Input Fields: Email or phone

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (468)
Category:	downloaded
Size (bytes):	1964
Entropy (8bit):	5.298383529084959
Encrypted:	false
SSDEEP:	48:o7L7NMmtL3ADFNPcpOXAV7D74OpFqfW3X/rV+Y9rw:oNLwFVcpOXOJXcudhw
MD5:	4C66442B5D484EC334493800EF99A9BE
SHA1:	85301278BDCCE3ED0A4F455D2474969811C6D7A7
SHA-256:	8E507422B8D311344CBFB89C9673E15E86031A9AE5F99B2F9DA6C3EED12F56B4
SHA-512:	5C6D8295769B4A5477DA31A4F55C4896D3DB6E3F30D92B383A6266E3276592F8A07D0AEC3002AA45673E7437A2914BD6CEB8383BAFA7FBB22404C74740810FA9
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEagYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHSW_N3_835AjWoFrhyUVjae3OYQQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.zZ=function(a){_.X.call(this,a.Fa);this.window=a.Ea.window.get();this.Hc=a.Ea.Hc};_.K(_.zZ,_.X);_.zZ.Ba=function(){return{Ea:{window:_.Qu,Hc:_.yF}}};_.zZ.prototype.yp=function(){};_.zZ.prototype.addEncryptionRecoveryMethod=function(){};_.AZ=function(a){return(a==null?void 0:a.op)\|\|function(){}};_.BZ=function(a){return(a==null?void 0:a.f4)\|\|function(){}};_.NSb=function(a){return(a==null?void 0:a.oq)\|\|function(){}};._.OSb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.PSb=function(a){setTimeout(function(){throw a;},0)};_.zZ.prototype.fP=function(){return!0};_.zZ.prototype.aa=function(a,b,c){b=this.Hc;var d=b.bJ,e=new _.nF;a=_.mF(e,7,a);d.call(b,305,a,c,void 0)};_.Nu(_.Tn,_.zZ);._.l();._.k("ziXSP");.var TZ=function(a){_.zZ.call(

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	dropped
Size (bytes):	1459
Entropy (8bit):	5.309536814830864
Encrypted:	false
SSDEEP:	24:kMYD7DObtudYqbYsNJ+YdJB/d+neNhz1iL0QhYn3M9Ih6u0hGbHEzGb0SFLM+OcK:o7DObg+5efNjqGhd0hGbkzGb0SC6Frw
MD5:	3B8C04E5267746EC50FAD82AC426FF50
SHA1:	E3EDD75E19D2568376F4B90CED3D47E4F9A1FD8C
SHA-256:	FE35087C88FB80E251F57E6FFA6EDDE9D70ED9C831B4439556230D8F6A0D9110
SHA-512:	21ECA120F86597859B0F046BEDAEFF56BC3DBDC87574221C9DE04F8F10BB4D589A9516632ED0CE9ECA4F737CDFF02C191C9FF31F1645592F3C4A503812941FF2
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.v0a=new _.uf(_.Xm);._.l();._.k("P6sQOc");.var A0a=!!(_.Uh[1]&1);var C0a=function(a,b,c,d,e){this.ea=a;this.Aa=b;this.ka=c;this.Ca=d;this.Ga=e;this.aa=0;this.da=B0a(this)},D0a=function(a){var b={};_.Oa(a.uT(),function(e){b[e]=!0});var c=a.nT(),d=a.pT();return new C0a(a.fQ(),c.aa()1E3,a.QS(),d.aa()1E3,b)},B0a=function(a){return Math.random()Math.min(a.AaMath.pow(a.ka,a.aa),a.Ca)},JH=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ga[b]:!0};var KH=function(a){_.X.call(this,a.Fa);this.da=a.Ea.nW;this.ea=a.Ea.metadata;a=a.Ea.Wha;this.fetch=a.fetch.bind(a)};_.K(KH,_.X);KH.Ba=function(){return{Ea:{nW:_.y0a,metadata:_.v0a,Wha:_.o0a}}};KH.prototype.aa=function(a,b){if(this.ea.getType(a.Od())!==1)return _.mn(a);var c=this.da.KV;return(c=c?D0a(c):null)&&JH(c)?_.dza(a,E0a(this,a,b,c)):_.mn(a)};.var E0a=function(a,b,c,d){return c.then(function(e){return e},function(e){

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	downloaded
Size (bytes):	1459
Entropy (8bit):	5.309536814830864
Encrypted:	false
SSDEEP:	24:kMYD7DObtudYqbYsNJ+YdJB/d+neNhz1iL0QhYn3M9Ih6u0hGbHEzGb0SFLM+OcK:o7DObg+5efNjqGhd0hGbkzGb0SC6Frw
MD5:	3B8C04E5267746EC50FAD82AC426FF50
SHA1:	E3EDD75E19D2568376F4B90CED3D47E4F9A1FD8C
SHA-256:	FE35087C88FB80E251F57E6FFA6EDDE9D70ED9C831B4439556230D8F6A0D9110
SHA-512:	21ECA120F86597859B0F046BEDAEFF56BC3DBDC87574221C9DE04F8F10BB4D589A9516632ED0CE9ECA4F737CDFF02C191C9FF31F1645592F3C4A503812941FF2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEagYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHSW_N3_835AjWoFrhyUVjae3OYQQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=P6sQOc"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.v0a=new _.uf(_.Xm);._.l();._.k("P6sQOc");.var A0a=!!(_.Uh[1]&1);var C0a=function(a,b,c,d,e){this.ea=a;this.Aa=b;this.ka=c;this.Ca=d;this.Ga=e;this.aa=0;this.da=B0a(this)},D0a=function(a){var b={};_.Oa(a.uT(),function(e){b[e]=!0});var c=a.nT(),d=a.pT();return new C0a(a.fQ(),c.aa()1E3,a.QS(),d.aa()1E3,b)},B0a=function(a){return Math.random()Math.min(a.AaMath.pow(a.ka,a.aa),a.Ca)},JH=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ga[b]:!0};var KH=function(a){_.X.call(this,a.Fa);this.da=a.Ea.nW;this.ea=a.Ea.metadata;a=a.Ea.Wha;this.fetch=a.fetch.bind(a)};_.K(KH,_.X);KH.Ba=function(){return{Ea:{nW:_.y0a,metadata:_.v0a,Wha:_.o0a}}};KH.prototype.aa=function(a,b){if(this.ea.getType(a.Od())!==1)return _.mn(a);var c=this.da.KV;return(c=c?D0a(c):null)&&JH(c)?_.dza(a,E0a(this,a,b,c)):_.mn(a)};.var E0a=function(a,b,c,d){return c.then(function(e){return e},function(e){

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (682)
Category:	downloaded
Size (bytes):	4068
Entropy (8bit):	5.352146509889801
Encrypted:	false
SSDEEP:	48:ve829NgX5wQZDX9Yl6NPcn5EwlIfXqHm4tWyc93tg5XZXGZXGWX3LqDYnysD27YZ:GFkNklIfAmmAYwt2Uny5A86CT9w
MD5:	E6AB948B09BC826B9AB84D04F7CEEB2C
SHA1:	C5E11654BB4E19F50396DBDAE9FC90C7DA732174
SHA-256:	273F792581B6E0A7616B57365618D7ABBD1346FCFFEFA2BEBB47E0522516D9CA
SHA-512:	CAEB0CEA164E954444ABB2B18872A6C48ED0D57018E153E2DBF51ABE49586EEEFFE6753DE0768DAE36039BCDC1F264D95B4C3EA82AB42B260121F5D46162329A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEagYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHSW_N3_835AjWoFrhyUVjae3OYQQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe"
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Cg(_.sqa);._.k("sOXFj");.var Tu=function(a){_.X.call(this,a.Fa)};_.K(Tu,_.X);Tu.Ba=_.X.Ba;Tu.prototype.aa=function(a){return a()};_.Nu(_.rqa,Tu);._.l();._.k("oGtAuc");._.fza=new _.uf(_.sqa);._.l();._.k("q0xTif");.var aAa=function(a){var b=function(d){_.lo(d)&&(_.lo(d).Mc=null,_.dv(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},pv=function(a){_.Lt.call(this,a.Fa);this.Qa=this.dom=null;if(this.Ql()){var b=_.Wm(this.wh(),[_.bn,_.an]);b=_.zi([b[_.bn],b[_.an]]).then(function(c){this.Qa=c[0];this.dom=c[1]},null,this);_.Iu(this,b)}this.Ra=a.Om.Afa};_.K(pv,_.Lt);pv.Ba=function(){return{Om:{Afa:function(a){return _.Ze(a)}}}};pv.prototype.Tp=function(a){return this.Ra.Tp(a)};.pv.prototype.getData=function(a){return this.Ra.getData(a)};pv.prototype.Oo=function(){_.ku(this.d

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	downloaded
Size (bytes):	747743
Entropy (8bit):	5.79182791629435
Encrypted:	false
SSDEEP:	3072:DTwIHOQcksvLwFzy0ltT4vzq20cy2eWzKRncURgoSdwInhPaZSvLGjCfDx/ludbZ:DrLWUzy0lVP9nz10BodLLMdUAUGiTjN
MD5:	315A77D21D52342D24A5584DEED5CA54
SHA1:	F68FD28A2F3DF0E723FAD9CD32F253A6F3C0E660
SHA-256:	13325E5DEBC25DB607CA9C2E5FCA10935C2006BD01D2FE037EE22692406089BB
SHA-512:	6AECE611F0A5A03A6AFBC9B2DEFD8C04544F154DC70282098840CA0739F976F59432C13AF5A81940E27F37D44810AD1990A84EAED7D1447EA0618DA5021CE0E4
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/am=5AzGkWEagYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlGB-UrXv-xnhLIFRGd8J12AM9nGQA/m=_b,_tp"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x11c60ce4, 0x2046986, 0x1a784f88, 0x11406f40, 0x72102, 0x0, 0x0, 0x2000001b, 0x61e, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Qa,Ua,gaa,iaa,mb,qaa,waa,Caa,Kaa,Maa,Paa,Lb,Qaa,Rb,Tb,Ub,Raa,Saa,Vb,Taa,Uaa,Vaa,Zb,$aa,bba,hc,ic,jc,gba,hba,lba,nba,pba,qba,uba,xba,rba,wba,vba,tba,sba,yba,Cba,Gba,Hba,Eba,Ic,Jc,Kba,Mba,Rba,Sba,Tba,Uba,Vba,Wba,Pba,Qba,Yba,hd,aca,bca,dca,fca,eca,hca,ica,jca,kca,mca,lca,oca,pca,qca,r

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	dropped
Size (bytes):	3131
Entropy (8bit):	5.415855705012616
Encrypted:	false
SSDEEP:	48:o7sNi+ANA3yPwR5jNQ8jse8sw5oO/A3NPA3SjpG6LEzX9TW5BnXkMQJIPlLt1lL8:ogHyY5jOTjT2ltvLKNinSJQttw
MD5:	AE39AA2753F5BE40292E997B553AB30F
SHA1:	036CB8D65465045CC0EBD597F7664CF088C3F0C6
SHA-256:	DE82B874D2ECB868246E96494BF4C373618C25A5E04E4FF33B39B2CA8E2D29D6
SHA-512:	BCC4825891B1760F9104D937E4E7FF86EE42D3D89342AF08D70D4E86E9B15A89CCCE5B70C89D684090318C1CA3F8007BA8FE657CA131164DB0B2511CC71007A0
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var OA=function(a){_.X.call(this,a.Fa)};_.K(OA,_.X);OA.Ba=_.X.Ba;OA.prototype.dT=function(a){return _.cf(this,{Xa:{bU:_.Pl}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.xi(function(e){window._wjdc=function(f){d(f);e(NKa(f,b,a))}}):NKa(c,b,a)})};var NKa=function(a,b,c){return(a=a&&a[c])?a:b.Xa.bU.dT(c)};.OA.prototype.aa=function(a,b){var c=_.Ura(b).zk;if(c.startsWith("$")){var d=_.Em.get(a);_.Fq[b]&&(d\|\|(d={},_.Em.set(a,d)),d[c]=_.Fq[b],delete _.Fq[b],_.Gq--);if(d)if(a=d[c])b=_.ff(a);else throw Error("Jb`"+b);else b=null}else b=null;return b};_.Nu(_.Vfa,OA);._.l();._.k("SNUn3");._.MKa=new _.uf(_.Dg);._.l();._.k("RMhBfe");.var OKa=function(a){var b=_.Eq(a);return b?new _.xi(function(c,d){var e=function(){b=_.Eq(a);var f=_.bga(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	downloaded
Size (bytes):	3131
Entropy (8bit):	5.415855705012616
Encrypted:	false
SSDEEP:	48:o7sNi+ANA3yPwR5jNQ8jse8sw5oO/A3NPA3SjpG6LEzX9TW5BnXkMQJIPlLt1lL8:ogHyY5jOTjT2ltvLKNinSJQttw
MD5:	AE39AA2753F5BE40292E997B553AB30F
SHA1:	036CB8D65465045CC0EBD597F7664CF088C3F0C6
SHA-256:	DE82B874D2ECB868246E96494BF4C373618C25A5E04E4FF33B39B2CA8E2D29D6
SHA-512:	BCC4825891B1760F9104D937E4E7FF86EE42D3D89342AF08D70D4E86E9B15A89CCCE5B70C89D684090318C1CA3F8007BA8FE657CA131164DB0B2511CC71007A0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEagYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHSW_N3_835AjWoFrhyUVjae3OYQQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var OA=function(a){_.X.call(this,a.Fa)};_.K(OA,_.X);OA.Ba=_.X.Ba;OA.prototype.dT=function(a){return _.cf(this,{Xa:{bU:_.Pl}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.xi(function(e){window._wjdc=function(f){d(f);e(NKa(f,b,a))}}):NKa(c,b,a)})};var NKa=function(a,b,c){return(a=a&&a[c])?a:b.Xa.bU.dT(c)};.OA.prototype.aa=function(a,b){var c=_.Ura(b).zk;if(c.startsWith("$")){var d=_.Em.get(a);_.Fq[b]&&(d\|\|(d={},_.Em.set(a,d)),d[c]=_.Fq[b],delete _.Fq[b],_.Gq--);if(d)if(a=d[c])b=_.ff(a);else throw Error("Jb`"+b);else b=null}else b=null;return b};_.Nu(_.Vfa,OA);._.l();._.k("SNUn3");._.MKa=new _.uf(_.Dg);._.l();._.k("RMhBfe");.var OKa=function(a){var b=_.Eq(a);return b?new _.xi(function(c,d){var e=function(){b=_.Eq(a);var f=_.bga(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	dropped
Size (bytes):	697087
Entropy (8bit):	5.598635112678657
Encrypted:	false
SSDEEP:	6144:Tfq3MngtoytLBhooIc/qttkPlqYbpSG2YKWinpxp4BGS3T3vJyNLZA9:TMugtVLvh+kxt2YKW2U9
MD5:	D3826A5CC52F48B01C237E819E5560D3
SHA1:	A261BE3EDDFA2499E3A80E0FDBC547F5615D4A04
SHA-256:	080886B0861A19AF74DE0570C6E976BF1FE77247CF8BD7635F32425B7E8F25BA
SHA-512:	5A4D8769E91F93255AE3AF8712E55807997336190E6D045D21F8F9ED51061D953A97C15E9352F227D71F6CD5665311E3AB42EBA90931A447091A438144B423B0
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2907)
Category:	dropped
Size (bytes):	23454
Entropy (8bit):	5.408812355529545
Encrypted:	false
SSDEEP:	384:iSrtcyJgla5dQl7CPYjffLQEu0S1EF5MdgROwv5jsg2EbPdNbdp/q1L9f:iSrtcyJc7CgjffcEdQddwBjl2EbVNbvA
MD5:	498084FE30B6F1F7E18A17EEEA8FFCC9
SHA1:	C084CE0DA02D4BE12672F562C9EC7B62D4E28153
SHA-256:	C1CE8A67AA6DD7D2073057EAAD29E03BCD02BE8D2F8B116242E26B5806630C49
SHA-512:	5FBA713495B184C9DA02E257536C57C4555BFC37F178146E74C413164ADBAB325346983E58FC3036E71E9EFCFA63844750FDBF476156D72FEF952CFF68FBB35F
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Uu.prototype.da=_.ca(41,function(){return _.Hj(this,3)});_.Fz=function(a,b){this.key=a;this.defaultValue=!1;this.flagName=b;this.flagNameForDebugging=void 0};_.Fz.prototype.ctor=function(a){return typeof a==="boolean"?a:this.defaultValue};_.Gz=function(){this.ka=!0;var a=_.Mj(_.zk(_.Ge("TSDtV",window),_.gza),_.Uu,1,_.Gj())[0];if(a){var b={};for(var c=_.n(_.Mj(a,_.hza,2,_.Gj())),d=c.next();!d.done;d=c.next()){var e=d.value;d=_.dk(e,1).toString();switch(_.Jj(e,_.Vu)){case 3:b[d]=_.bk(e,_.Aj(e,_.Vu,3));break;case 2:b[d]=_.dk(e,_.Aj(e,_.Vu,2));break;case 4:b[d]=_.fk(e,_.Aj(e,_.Vu,4));break;case 5:b[d]=_.kk(e,5,_.Vu);break;case 6:b[d]=_.lk(e,_.mf,6,_.Vu);break;case 8:e=_.Lj(e,_.iza,8,_.Vu);switch(_.Jj(e,_.Wu)){case 1:b[d]=_.kk(e,1,_.Wu);.break;default:throw Error("od`"+_.Jj(e,_.Wu));}break;default:throw Error("od`"+_.Jj(e,_.Vu));}}}else b={};this.ea=b;this.token=a?a.da():null};_

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	dropped
Size (bytes):	5050
Entropy (8bit):	5.3019521130781655
Encrypted:	false
SSDEEP:	96:oMMRpyvkMmrDbBargZEi/PggzLmwC8Vh11PGmtjGTsECOFpw:ip7MQE4Ei/PgIBjmmepR6
MD5:	56879DD8886F803593865378D078E00A
SHA1:	7225C36DEEFBDFB2386747582CF19D17C480B724
SHA-256:	113A7E4489B214342173C9A39D2D6ACF444E13D9B61C05649B1FA3A21EBE018B
SHA-512:	26969E03C7CC01C747DA3BB25ECF7C0B8F3A9AF863BC5FA5FC20F12F7A1608265122701DA115184DAF285B3112F24228CDFEFE0E834055CD201B79A71CEE9BA1
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.aOa=_.z("wg1P6b",[_.DB,_.Vn,_.co]);._.k("wg1P6b");.var x7a;x7a=_.yh(["aria-"]);._.oK=function(a){_.Y.call(this,a.Fa);this.La=this.Aa=this.aa=this.viewportElement=this.Na=null;this.Kc=a.Ea.xf;this.ab=a.Ea.focus;this.Fc=a.Ea.Fc;this.ea=this.Ui();a=-1*parseInt(_.Ro(this.Ui().el(),"marginTop")\|\|"0",10);var b=parseInt(_.Ro(this.Ui().el(),"marginBottom")\|\|"0",10);this.Ta={top:a,right:0,bottom:b,left:0};a=_.hf(this.getData("isMenuDynamic"),!1);b=_.hf(this.getData("isMenuHoisted"),!1);this.Ga=a?1:b?2:0;this.ka=!1;this.Ca=1;this.Ga!==1&&(this.aa=this.Sa("U0exHf").children().Vc(0),_.Iu(this,.y7a(this,this.aa.el())));_.nG(this.wa())&&(a=this.wa().el(),b=this.De.bind(this),a.__soy_skip_handler=b)};_.K(_.oK,_.Y);_.oK.Ba=function(){return{Ea:{xf:_.UF,focus:_.FF,Fc:_.Ru}}};_.oK.prototype.pz=function(a){var b=a.source;this.Na=b;var c;((c=a.data)==null?0:c.kA)?(a=a.data.kA,this.Ca=a==="MOUS

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	3467
Entropy (8bit):	5.532497526299779
Encrypted:	false
SSDEEP:	96:oUvuxTBvdhUoGnHVPGjtwtaK8+0g/Ikhw:Hu5Bvdh8VJn0gxy
MD5:	3ED8C8DB9640906244F3E3D4572E5FC5
SHA1:	20E1A5F9D100820D3F5BA5BE64EC30BEACA759E0
SHA-256:	CDC1418D81D8BB2E5F6352531DDAE3D35F41E88D62BB16990F52D831DE6C98B2
SHA-512:	95AB6EEBDA369F61E9E5AD7A6C703101B8DA27AA420915D9A3A5631593DC4BF07B3EBB9F88FE30A4D6B7E68347A8A95CAC63157B9DDD6A87B94CA7742143C347
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEagYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHSW_N3_835AjWoFrhyUVjae3OYQQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var Jya=function(){var a=_.Le();return _.gk(a,1)},yu=function(a){this.Da=_.u(a,0,yu.messageId)};_.K(yu,_.w);yu.prototype.Ha=function(){return _.Sj(this,1)};yu.prototype.Ua=function(a){return _.rk(this,1,a)};yu.messageId="f.bo";var zu=function(){_.Fm.call(this)};_.K(zu,_.Fm);zu.prototype.zd=function(){this.sU=!1;Kya(this);_.Fm.prototype.zd.call(this)};zu.prototype.aa=function(){Lya(this);if(this.KD)return Mya(this),!1;if(!this.vW)return Au(this),!0;this.dispatchEvent("p");if(!this.oQ)return Au(this),!0;this.xN?(this.dispatchEvent("r"),Au(this)):Mya(this);return!1};.var Nya=function(a){var b=new _.qp(a.R5);a.fR!=null&&_.bo(b,"authuser",a.fR);return b},Mya=function(a){a.KD=!0;var b=Nya(a),c="rt=r&f_uid="+_.Qk(a.oQ);_.wn(b,(0,_.gg)(a.ea,a),"POST",c)};.zu.prototype.ea=function(a){a=a.target;Lya(this);if(_.zn(a)){this.WK=0;if(this.xN)this.KD=!1,this.dispatchEvent("r"

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	dropped
Size (bytes):	3467
Entropy (8bit):	5.532497526299779
Encrypted:	false
SSDEEP:	96:oUvuxTBvdhUoGnHVPGjtwtaK8+0g/Ikhw:Hu5Bvdh8VJn0gxy
MD5:	3ED8C8DB9640906244F3E3D4572E5FC5
SHA1:	20E1A5F9D100820D3F5BA5BE64EC30BEACA759E0
SHA-256:	CDC1418D81D8BB2E5F6352531DDAE3D35F41E88D62BB16990F52D831DE6C98B2
SHA-512:	95AB6EEBDA369F61E9E5AD7A6C703101B8DA27AA420915D9A3A5631593DC4BF07B3EBB9F88FE30A4D6B7E68347A8A95CAC63157B9DDD6A87B94CA7742143C347
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var Jya=function(){var a=_.Le();return _.gk(a,1)},yu=function(a){this.Da=_.u(a,0,yu.messageId)};_.K(yu,_.w);yu.prototype.Ha=function(){return _.Sj(this,1)};yu.prototype.Ua=function(a){return _.rk(this,1,a)};yu.messageId="f.bo";var zu=function(){_.Fm.call(this)};_.K(zu,_.Fm);zu.prototype.zd=function(){this.sU=!1;Kya(this);_.Fm.prototype.zd.call(this)};zu.prototype.aa=function(){Lya(this);if(this.KD)return Mya(this),!1;if(!this.vW)return Au(this),!0;this.dispatchEvent("p");if(!this.oQ)return Au(this),!0;this.xN?(this.dispatchEvent("r"),Au(this)):Mya(this);return!1};.var Nya=function(a){var b=new _.qp(a.R5);a.fR!=null&&_.bo(b,"authuser",a.fR);return b},Mya=function(a){a.KD=!0;var b=Nya(a),c="rt=r&f_uid="+_.Qk(a.oQ);_.wn(b,(0,_.gg)(a.ea,a),"POST",c)};.zu.prototype.ea=function(a){a=a.target;Lya(this);if(_.zn(a)){this.WK=0;if(this.xN)this.KD=!1,this.dispatchEvent("r"

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	downloaded
Size (bytes):	33446
Entropy (8bit):	5.39017273914164
Encrypted:	false
SSDEEP:	768:EhGGx5LfgRPng7Yt1w7XPrAMF3lt2BQRGRXfL1L6G9ik0iOM:msP1w4MF3ltdmP52CxOM
MD5:	EACCFEC9F28BA9C66496D915FBE3DC75
SHA1:	A767F848BCB5D0244AAE7B06D51C73ADA848719E
SHA-256:	B01E0133271B96426078F71005479D0248E1D8B201FA1F4246BEED8415CF7981
SHA-512:	96C0B6B29F0B681780FC8CA31DF938889D23F219F70C834DB953E6F88B969C6D17D688A83C999610CC53E3E9188F7011DFE29DEB8BD8669B7E95E6665D28A5D8
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEagYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHSW_N3_835AjWoFrhyUVjae3OYQQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Yua=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.qp("//www.google.com/images/cleardot.gif");_.Bp(c)}this.ka=c};_.h=Yua.prototype;_.h.Yc=null;_.h.g_=1E4;_.h.nB=!1;_.h.cR=0;_.h.sK=null;_.h.HV=null;_.h.setTimeout=function(a){this.g_=a};_.h.start=function(){if(this.nB)throw Error("hc");this.nB=!0;this.cR=0;Zua(this)};_.h.stop=function(){$ua(this);this.nB=!1};.var Zua=function(a){a.cR++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Im((0,_.gg)(a.LH,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.gg)(a.Eka,a),a.aa.onerror=(0,_.gg)(a.Dka,a),a.aa.onabort=(0,_.gg)(a.Cka,a),a.sK=_.Im(a.Fka,a.g_,a),a.aa.src=String(a.ka))};_.h=Yua.prototype;_.h.Eka=function(){this.LH(!0)};_.h.Dka=function(){this.LH(!1)};_.h.Cka=function(){this.LH(!1)};_.h.Fka=function(){this.LH(!1)};._.h.LH=function(a){$ua(this);a?(this.nB=!1,this.da.call(this.ea,!0)):this.cR<=0?Zua(this):(this.nB=!1,

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (682)
Category:	dropped
Size (bytes):	4068
Entropy (8bit):	5.352146509889801
Encrypted:	false
SSDEEP:	48:ve829NgX5wQZDX9Yl6NPcn5EwlIfXqHm4tWyc93tg5XZXGZXGWX3LqDYnysD27YZ:GFkNklIfAmmAYwt2Uny5A86CT9w
MD5:	E6AB948B09BC826B9AB84D04F7CEEB2C
SHA1:	C5E11654BB4E19F50396DBDAE9FC90C7DA732174
SHA-256:	273F792581B6E0A7616B57365618D7ABBD1346FCFFEFA2BEBB47E0522516D9CA
SHA-512:	CAEB0CEA164E954444ABB2B18872A6C48ED0D57018E153E2DBF51ABE49586EEEFFE6753DE0768DAE36039BCDC1F264D95B4C3EA82AB42B260121F5D46162329A
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Cg(_.sqa);._.k("sOXFj");.var Tu=function(a){_.X.call(this,a.Fa)};_.K(Tu,_.X);Tu.Ba=_.X.Ba;Tu.prototype.aa=function(a){return a()};_.Nu(_.rqa,Tu);._.l();._.k("oGtAuc");._.fza=new _.uf(_.sqa);._.l();._.k("q0xTif");.var aAa=function(a){var b=function(d){_.lo(d)&&(_.lo(d).Mc=null,_.dv(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},pv=function(a){_.Lt.call(this,a.Fa);this.Qa=this.dom=null;if(this.Ql()){var b=_.Wm(this.wh(),[_.bn,_.an]);b=_.zi([b[_.bn],b[_.an]]).then(function(c){this.Qa=c[0];this.dom=c[1]},null,this);_.Iu(this,b)}this.Ra=a.Om.Afa};_.K(pv,_.Lt);pv.Ba=function(){return{Om:{Afa:function(a){return _.Ze(a)}}}};pv.prototype.Tp=function(a){return this.Ra.Tp(a)};.pv.prototype.getData=function(a){return this.Ra.getData(a)};pv.prototype.Oo=function(){_.ku(this.d

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (395)
Category:	downloaded
Size (bytes):	1608
Entropy (8bit):	5.272260972196049
Encrypted:	false
SSDEEP:	48:o7dNGEF1HN/EJShSZuLpfMxISN+oP7D8bBrw:o1sSEZumJcRw
MD5:	0823F12FAB09559EE0684B4B6F6F9329
SHA1:	D2AC8628F2CA985373CF0B6E9A9409288C9F0A52
SHA-256:	5DEAF459D657397CFDE8AB99C38E196624A0F1CCC4873EAC7C427E95CA5AD0C9
SHA-512:	2035BCC69738F041366DA6F9E5CC744BBE3BF89E1E413FD526D53C29C32556668F65BF07760714C7DCF300557913D45E00F56BA2DAF472A6E1FA2327569C793D
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEagYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHSW_N3_835AjWoFrhyUVjae3OYQQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,ZDZcre,A7fCU"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Cg(_.Yla);_.MA=function(a){_.X.call(this,a.Fa);this.aa=a.Xa.cache};_.K(_.MA,_.X);_.MA.Ba=function(){return{Xa:{cache:_.Ft}}};_.MA.prototype.execute=function(a){_.Db(a,function(b){var c;_.ef(b)&&(c=b.hb.jc(b.mb));c&&this.aa.tH(c)},this);return{}};_.Nu(_.dma,_.MA);._.l();._.k("ZDZcre");.var aI=function(a){_.X.call(this,a.Fa);this.Lm=a.Ea.Lm;this.Z4=a.Ea.metadata;this.aa=a.Ea.Rt};_.K(aI,_.X);aI.Ba=function(){return{Ea:{Lm:_.FH,metadata:_.v0a,Rt:_.CH}}};aI.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Db(a,function(c){var d=b.Z4.getType(c.Od())===2?b.Lm.Pb(c):b.Lm.fetch(c);return _.bm(c,_.GH)?d.then(function(e){return _.Id(e)}):d},this)};_.Nu(_.ima,aI);._.l();._.k("K5nYTd");._.u0a=new _.uf(_.ema);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var IH=function(a){_.X.call(this,a.Fa);this.aa=a.Ea.jR};_.K(IH,_.X);IH.Ba=func

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	downloaded
Size (bytes):	5050
Entropy (8bit):	5.3019521130781655
Encrypted:	false
SSDEEP:	96:oMMRpyvkMmrDbBargZEi/PggzLmwC8Vh11PGmtjGTsECOFpw:ip7MQE4Ei/PgIBjmmepR6
MD5:	56879DD8886F803593865378D078E00A
SHA1:	7225C36DEEFBDFB2386747582CF19D17C480B724
SHA-256:	113A7E4489B214342173C9A39D2D6ACF444E13D9B61C05649B1FA3A21EBE018B
SHA-512:	26969E03C7CC01C747DA3BB25ECF7C0B8F3A9AF863BC5FA5FC20F12F7A1608265122701DA115184DAF285B3112F24228CDFEFE0E834055CD201B79A71CEE9BA1
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEagYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHSW_N3_835AjWoFrhyUVjae3OYQQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.aOa=_.z("wg1P6b",[_.DB,_.Vn,_.co]);._.k("wg1P6b");.var x7a;x7a=_.yh(["aria-"]);._.oK=function(a){_.Y.call(this,a.Fa);this.La=this.Aa=this.aa=this.viewportElement=this.Na=null;this.Kc=a.Ea.xf;this.ab=a.Ea.focus;this.Fc=a.Ea.Fc;this.ea=this.Ui();a=-1*parseInt(_.Ro(this.Ui().el(),"marginTop")\|\|"0",10);var b=parseInt(_.Ro(this.Ui().el(),"marginBottom")\|\|"0",10);this.Ta={top:a,right:0,bottom:b,left:0};a=_.hf(this.getData("isMenuDynamic"),!1);b=_.hf(this.getData("isMenuHoisted"),!1);this.Ga=a?1:b?2:0;this.ka=!1;this.Ca=1;this.Ga!==1&&(this.aa=this.Sa("U0exHf").children().Vc(0),_.Iu(this,.y7a(this,this.aa.el())));_.nG(this.wa())&&(a=this.wa().el(),b=this.De.bind(this),a.__soy_skip_handler=b)};_.K(_.oK,_.Y);_.oK.Ba=function(){return{Ea:{xf:_.UF,focus:_.FF,Fc:_.Ru}}};_.oK.prototype.pz=function(a){var b=a.source;this.Na=b;var c;((c=a.data)==null?0:c.kA)?(a=a.data.kA,this.Ca=a==="MOUS

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	dropped
Size (bytes):	747743
Entropy (8bit):	5.79182791629435
Encrypted:	false
SSDEEP:	3072:DTwIHOQcksvLwFzy0ltT4vzq20cy2eWzKRncURgoSdwInhPaZSvLGjCfDx/ludbZ:DrLWUzy0lVP9nz10BodLLMdUAUGiTjN
MD5:	315A77D21D52342D24A5584DEED5CA54
SHA1:	F68FD28A2F3DF0E723FAD9CD32F253A6F3C0E660
SHA-256:	13325E5DEBC25DB607CA9C2E5FCA10935C2006BD01D2FE037EE22692406089BB
SHA-512:	6AECE611F0A5A03A6AFBC9B2DEFD8C04544F154DC70282098840CA0739F976F59432C13AF5A81940E27F37D44810AD1990A84EAED7D1447EA0618DA5021CE0E4
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x11c60ce4, 0x2046986, 0x1a784f88, 0x11406f40, 0x72102, 0x0, 0x0, 0x2000001b, 0x61e, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Qa,Ua,gaa,iaa,mb,qaa,waa,Caa,Kaa,Maa,Paa,Lb,Qaa,Rb,Tb,Ub,Raa,Saa,Vb,Taa,Uaa,Vaa,Zb,$aa,bba,hc,ic,jc,gba,hba,lba,nba,pba,qba,uba,xba,rba,wba,vba,tba,sba,yba,Cba,Gba,Hba,Eba,Ic,Jc,Kba,Mba,Rba,Sba,Tba,Uba,Vba,Wba,Pba,Qba,Yba,hd,aca,bca,dca,fca,eca,hca,ica,jca,kca,mca,lca,oca,pca,qca,r

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2907)
Category:	downloaded
Size (bytes):	23454
Entropy (8bit):	5.408812355529545
Encrypted:	false
SSDEEP:	384:iSrtcyJgla5dQl7CPYjffLQEu0S1EF5MdgROwv5jsg2EbPdNbdp/q1L9f:iSrtcyJc7CgjffcEdQddwBjl2EbVNbvA
MD5:	498084FE30B6F1F7E18A17EEEA8FFCC9
SHA1:	C084CE0DA02D4BE12672F562C9EC7B62D4E28153
SHA-256:	C1CE8A67AA6DD7D2073057EAAD29E03BCD02BE8D2F8B116242E26B5806630C49
SHA-512:	5FBA713495B184C9DA02E257536C57C4555BFC37F178146E74C413164ADBAB325346983E58FC3036E71E9EFCFA63844750FDBF476156D72FEF952CFF68FBB35F
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEagYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHSW_N3_835AjWoFrhyUVjae3OYQQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Uu.prototype.da=_.ca(41,function(){return _.Hj(this,3)});_.Fz=function(a,b){this.key=a;this.defaultValue=!1;this.flagName=b;this.flagNameForDebugging=void 0};_.Fz.prototype.ctor=function(a){return typeof a==="boolean"?a:this.defaultValue};_.Gz=function(){this.ka=!0;var a=_.Mj(_.zk(_.Ge("TSDtV",window),_.gza),_.Uu,1,_.Gj())[0];if(a){var b={};for(var c=_.n(_.Mj(a,_.hza,2,_.Gj())),d=c.next();!d.done;d=c.next()){var e=d.value;d=_.dk(e,1).toString();switch(_.Jj(e,_.Vu)){case 3:b[d]=_.bk(e,_.Aj(e,_.Vu,3));break;case 2:b[d]=_.dk(e,_.Aj(e,_.Vu,2));break;case 4:b[d]=_.fk(e,_.Aj(e,_.Vu,4));break;case 5:b[d]=_.kk(e,5,_.Vu);break;case 6:b[d]=_.lk(e,_.mf,6,_.Vu);break;case 8:e=_.Lj(e,_.iza,8,_.Vu);switch(_.Jj(e,_.Wu)){case 1:b[d]=_.kk(e,1,_.Wu);.break;default:throw Error("od`"+_.Jj(e,_.Wu));}break;default:throw Error("od`"+_.Jj(e,_.Vu));}}}else b={};this.ea=b;this.token=a?a.da():null};_

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	dropped
Size (bytes):	9211
Entropy (8bit):	5.40130909479059
Encrypted:	false
SSDEEP:	192:DYUqtMklctN8yZZqZQGege1BQHSK1tj9e:DY9Mklq9HqXECZ1tj9e
MD5:	DE6205714FB6FC5CB852B61E299CC119
SHA1:	7D4FB91D961EAF952EE08661D674E142327A56E5
SHA-256:	0C0020D68375603F7A0A7EE1AA5CB49708D0DEA473BE26D91A4CFFFE2F671E08
SHA-512:	388068F1927CEEDEFDBCB86718DF15FBBD32770A34F1DD907A7E365DD3632333522CBD6BA4F14DFA1972F7CC5091ED103F9B1964B76264C7B4CCB35C2CFA19C4
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.sOa=_.z("SD8Jgb",[]);._.oX=function(a,b){if(typeof b==="string")a.Lc(b);else if(b instanceof _.Sp&&b.ia&&b.ia===_.C)b=_.$a(b.qv()),a.empty().append(b);else if(b instanceof _.Va)b=_.$a(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("Xf");};_.pX=function(a){var b=_.Xo(a,"[jsslot]");if(b.size()>0)return b;b=new _.Vo([_.pl("span")]);_.Yo(b,"jsslot","");a.empty().append(b);return b};_.YOb=function(a){return a===null\|\|typeof a==="string"&&_.Vi(a)};._.k("SD8Jgb");._.yX=function(a){_.Y.call(this,a.Fa);this.Va=a.controller.Va;this.jd=a.controllers.jd[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.wa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.yX,_.Y);_.yX.Ba=function(){return{controller:{Va:{jsname:"n7vHCb",ctor:_.Qv},header:{jsname:"tJHJj",ctor:_.Qv},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	dropped
Size (bytes):	33446
Entropy (8bit):	5.39017273914164
Encrypted:	false
SSDEEP:	768:EhGGx5LfgRPng7Yt1w7XPrAMF3lt2BQRGRXfL1L6G9ik0iOM:msP1w4MF3ltdmP52CxOM
MD5:	EACCFEC9F28BA9C66496D915FBE3DC75
SHA1:	A767F848BCB5D0244AAE7B06D51C73ADA848719E
SHA-256:	B01E0133271B96426078F71005479D0248E1D8B201FA1F4246BEED8415CF7981
SHA-512:	96C0B6B29F0B681780FC8CA31DF938889D23F219F70C834DB953E6F88B969C6D17D688A83C999610CC53E3E9188F7011DFE29DEB8BD8669B7E95E6665D28A5D8
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Yua=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.qp("//www.google.com/images/cleardot.gif");_.Bp(c)}this.ka=c};_.h=Yua.prototype;_.h.Yc=null;_.h.g_=1E4;_.h.nB=!1;_.h.cR=0;_.h.sK=null;_.h.HV=null;_.h.setTimeout=function(a){this.g_=a};_.h.start=function(){if(this.nB)throw Error("hc");this.nB=!0;this.cR=0;Zua(this)};_.h.stop=function(){$ua(this);this.nB=!1};.var Zua=function(a){a.cR++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Im((0,_.gg)(a.LH,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.gg)(a.Eka,a),a.aa.onerror=(0,_.gg)(a.Dka,a),a.aa.onabort=(0,_.gg)(a.Cka,a),a.sK=_.Im(a.Fka,a.g_,a),a.aa.src=String(a.ka))};_.h=Yua.prototype;_.h.Eka=function(){this.LH(!0)};_.h.Dka=function(){this.LH(!1)};_.h.Cka=function(){this.LH(!1)};_.h.Fka=function(){this.LH(!1)};._.h.LH=function(a){$ua(this);a?(this.nB=!1,this.da.call(this.ea,!0)):this.cR<=0?Zua(this):(this.nB=!1,

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.852645816977233
Encrypted:	false
SSDEEP:	3:DZFJu0+WVTBCq2xCKsJJuYHSKnZ:lFJuuVTBpnu4SKZ
MD5:	3D76DE7C583DA8ED6D1D5AB91239F88B
SHA1:	A0818EFD94EFC525EBF513EDE7CADE6D038DF57A
SHA-256:	E9FBC4E9A936269D7CC25B32C7910F3861CA3D3AE84907A34D613442E44A01E1
SHA-512:	0DA8AD357DFCEB655865C834BFAF7EABE3762DB13EF9BE681F2426540E767C8F3779D1E90D9DACB3040363F72A263DA9FA4F61EEA72C21DC07DED17488207504
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto
Preview:	Cj0KBw0ZARP6GgAKKQ3oIX6GGgQISxgCKhwIClIYCg5AIS4kI18qLSY/Ky8lLBABGP////8PCgcN05ioBxoA

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (468)
Category:	dropped
Size (bytes):	1964
Entropy (8bit):	5.298383529084959
Encrypted:	false
SSDEEP:	48:o7L7NMmtL3ADFNPcpOXAV7D74OpFqfW3X/rV+Y9rw:oNLwFVcpOXOJXcudhw
MD5:	4C66442B5D484EC334493800EF99A9BE
SHA1:	85301278BDCCE3ED0A4F455D2474969811C6D7A7
SHA-256:	8E507422B8D311344CBFB89C9673E15E86031A9AE5F99B2F9DA6C3EED12F56B4
SHA-512:	5C6D8295769B4A5477DA31A4F55C4896D3DB6E3F30D92B383A6266E3276592F8A07D0AEC3002AA45673E7437A2914BD6CEB8383BAFA7FBB22404C74740810FA9
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.zZ=function(a){_.X.call(this,a.Fa);this.window=a.Ea.window.get();this.Hc=a.Ea.Hc};_.K(_.zZ,_.X);_.zZ.Ba=function(){return{Ea:{window:_.Qu,Hc:_.yF}}};_.zZ.prototype.yp=function(){};_.zZ.prototype.addEncryptionRecoveryMethod=function(){};_.AZ=function(a){return(a==null?void 0:a.op)\|\|function(){}};_.BZ=function(a){return(a==null?void 0:a.f4)\|\|function(){}};_.NSb=function(a){return(a==null?void 0:a.oq)\|\|function(){}};._.OSb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.PSb=function(a){setTimeout(function(){throw a;},0)};_.zZ.prototype.fP=function(){return!0};_.zZ.prototype.aa=function(a,b,c){b=this.Hc;var d=b.bJ,e=new _.nF;a=_.mF(e,7,a);d.call(b,305,a,c,void 0)};_.Nu(_.Tn,_.zZ);._.l();._.k("ziXSP");.var TZ=function(a){_.zZ.call(

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (395)
Category:	dropped
Size (bytes):	1608
Entropy (8bit):	5.272260972196049
Encrypted:	false
SSDEEP:	48:o7dNGEF1HN/EJShSZuLpfMxISN+oP7D8bBrw:o1sSEZumJcRw
MD5:	0823F12FAB09559EE0684B4B6F6F9329
SHA1:	D2AC8628F2CA985373CF0B6E9A9409288C9F0A52
SHA-256:	5DEAF459D657397CFDE8AB99C38E196624A0F1CCC4873EAC7C427E95CA5AD0C9
SHA-512:	2035BCC69738F041366DA6F9E5CC744BBE3BF89E1E413FD526D53C29C32556668F65BF07760714C7DCF300557913D45E00F56BA2DAF472A6E1FA2327569C793D
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Cg(_.Yla);_.MA=function(a){_.X.call(this,a.Fa);this.aa=a.Xa.cache};_.K(_.MA,_.X);_.MA.Ba=function(){return{Xa:{cache:_.Ft}}};_.MA.prototype.execute=function(a){_.Db(a,function(b){var c;_.ef(b)&&(c=b.hb.jc(b.mb));c&&this.aa.tH(c)},this);return{}};_.Nu(_.dma,_.MA);._.l();._.k("ZDZcre");.var aI=function(a){_.X.call(this,a.Fa);this.Lm=a.Ea.Lm;this.Z4=a.Ea.metadata;this.aa=a.Ea.Rt};_.K(aI,_.X);aI.Ba=function(){return{Ea:{Lm:_.FH,metadata:_.v0a,Rt:_.CH}}};aI.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Db(a,function(c){var d=b.Z4.getType(c.Od())===2?b.Lm.Pb(c):b.Lm.fetch(c);return _.bm(c,_.GH)?d.then(function(e){return _.Id(e)}):d},this)};_.Nu(_.ima,aI);._.l();._.k("K5nYTd");._.u0a=new _.uf(_.ema);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var IH=function(a){_.X.call(this,a.Fa);this.aa=a.Ea.jR};_.K(IH,_.X);IH.Ba=func

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	9211
Entropy (8bit):	5.40130909479059
Encrypted:	false
SSDEEP:	192:DYUqtMklctN8yZZqZQGege1BQHSK1tj9e:DY9Mklq9HqXECZ1tj9e
MD5:	DE6205714FB6FC5CB852B61E299CC119
SHA1:	7D4FB91D961EAF952EE08661D674E142327A56E5
SHA-256:	0C0020D68375603F7A0A7EE1AA5CB49708D0DEA473BE26D91A4CFFFE2F671E08
SHA-512:	388068F1927CEEDEFDBCB86718DF15FBBD32770A34F1DD907A7E365DD3632333522CBD6BA4F14DFA1972F7CC5091ED103F9B1964B76264C7B4CCB35C2CFA19C4
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEagYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=AvtSve,CMcBD,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,cYShmd,eVCnO,hc6Ubd,inNHtf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,qPfo0c,qmdT9,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHSW_N3_835AjWoFrhyUVjae3OYQQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.sOa=_.z("SD8Jgb",[]);._.oX=function(a,b){if(typeof b==="string")a.Lc(b);else if(b instanceof _.Sp&&b.ia&&b.ia===_.C)b=_.$a(b.qv()),a.empty().append(b);else if(b instanceof _.Va)b=_.$a(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("Xf");};_.pX=function(a){var b=_.Xo(a,"[jsslot]");if(b.size()>0)return b;b=new _.Vo([_.pl("span")]);_.Yo(b,"jsslot","");a.empty().append(b);return b};_.YOb=function(a){return a===null\|\|typeof a==="string"&&_.Vi(a)};._.k("SD8Jgb");._.yX=function(a){_.Y.call(this,a.Fa);this.Va=a.controller.Va;this.jd=a.controllers.jd[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.wa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.yX,_.Y);_.yX.Ba=function(){return{controller:{Va:{jsname:"n7vHCb",ctor:_.Qv},header:{jsname:"tJHJj",ctor:_.Qv},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	downloaded
Size (bytes):	697087
Entropy (8bit):	5.598635112678657
Encrypted:	false
SSDEEP:	6144:Tfq3MngtoytLBhooIc/qttkPlqYbpSG2YKWinpxp4BGS3T3vJyNLZA9:TMugtVLvh+kxt2YKW2U9
MD5:	D3826A5CC52F48B01C237E819E5560D3
SHA1:	A261BE3EDDFA2499E3A80E0FDBC547F5615D4A04
SHA-256:	080886B0861A19AF74DE0570C6E976BF1FE77247CF8BD7635F32425B7E8F25BA
SHA-512:	5A4D8769E91F93255AE3AF8712E55807997336190E6D045D21F8F9ED51061D953A97C15E9352F227D71F6CD5665311E3AB42EBA90931A447091A438144B423B0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.fLdFxQhmEt0.es5.O/ck=boq-identity.AccountsSignInUi.q79j2tLetCU.L.B1.O/am=5AzGkWEagYD4hKcBvQFFAiEHAAAAAAAAAABsAACAHgY/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHSW_N3_835AjWoFrhyUVjae3OYQQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,XVq9Qb,STuCOe,njlZCf,m9oV,vjKJJ,y5vRwf,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,qPfo0c,cYShmd,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,WpP9Yc,lwddkf,SpsfSb,aC1iue,tUnxGc,aW3pY,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,xBaz7b,eVCnO,LDQI"
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 01:34:34.121747971 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 24, 2024 01:34:36.481018066 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:36.481079102 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:36.481153011 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:36.481261969 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:36.481360912 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:36.481437922 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:36.481467962 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:36.481499910 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:36.481687069 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:36.481710911 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.331983089 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.332392931 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:37.332454920 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.333085060 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.333272934 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:37.334106922 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.334182978 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:37.335050106 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:37.335151911 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.335306883 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:37.335361004 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.336636066 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.336833954 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:37.336893082 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.338457108 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.338551998 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:37.341010094 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.341104031 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:37.341311932 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:37.341406107 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.384983063 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:37.385010958 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.385008097 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:37.434798956 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:37.718862057 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.718889952 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.719062090 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:37.719094992 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.719146013 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:37.720135927 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:37.720201969 CEST	443	49736	142.250.185.206	192.168.2.4
Oct 24, 2024 01:34:37.720264912 CEST	49736	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:34:39.470571041 CEST	49740	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:39.470654964 CEST	443	49740	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:39.470742941 CEST	49740	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:39.470952034 CEST	49740	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:39.470974922 CEST	443	49740	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:39.763583899 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:39.763673067 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:39.763741970 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:39.765911102 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:39.765986919 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:40.534879923 CEST	443	49740	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:40.535197020 CEST	49740	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:40.535254002 CEST	443	49740	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:40.536349058 CEST	443	49740	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:40.536434889 CEST	49740	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:40.537548065 CEST	49740	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:40.537619114 CEST	443	49740	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:40.591741085 CEST	49740	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:40.591751099 CEST	443	49740	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:40.617312908 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:40.617404938 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:40.621644020 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:40.621671915 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:40.622029066 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:40.638581991 CEST	49740	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:40.664900064 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:40.707365036 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:40.908530951 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:40.908673048 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:40.908772945 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:40.908818007 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:40.908847094 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:40.908847094 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:40.908864021 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:40.908880949 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:40.940279007 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:40.940361023 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:40.940444946 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:40.940881968 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:40.940951109 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:41.365061998 CEST	55388	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:41.370774031 CEST	53	55388	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:41.372867107 CEST	55388	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:41.372868061 CEST	55388	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:41.378710032 CEST	53	55388	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:41.791731119 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:41.791903019 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:41.793406963 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:41.793437004 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:41.793802023 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:41.794934034 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:41.835340977 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:41.970827103 CEST	53	55388	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:41.972071886 CEST	55388	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:41.977899075 CEST	53	55388	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:41.977976084 CEST	55388	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:42.039859056 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:42.039920092 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:42.040832043 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:42.040832996 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:42.041753054 CEST	49744	443	192.168.2.4	184.28.90.27
Oct 24, 2024 01:34:42.041790962 CEST	443	49744	184.28.90.27	192.168.2.4
Oct 24, 2024 01:34:47.003026009 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 24, 2024 01:34:47.003066063 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 24, 2024 01:34:47.009236097 CEST	55397	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:34:47.009273052 CEST	443	55397	20.12.23.50	192.168.2.4
Oct 24, 2024 01:34:47.009524107 CEST	55397	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:34:47.010627985 CEST	55397	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:34:47.010641098 CEST	443	55397	20.12.23.50	192.168.2.4
Oct 24, 2024 01:34:47.878154993 CEST	443	55397	20.12.23.50	192.168.2.4
Oct 24, 2024 01:34:47.878242970 CEST	55397	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:34:47.977884054 CEST	55397	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:34:47.977905989 CEST	443	55397	20.12.23.50	192.168.2.4
Oct 24, 2024 01:34:47.978255033 CEST	443	55397	20.12.23.50	192.168.2.4
Oct 24, 2024 01:34:48.027436018 CEST	55397	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:34:49.475286007 CEST	55397	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:34:49.484786987 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 24, 2024 01:34:49.490586996 CEST	80	49723	199.232.214.172	192.168.2.4
Oct 24, 2024 01:34:49.490787029 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 24, 2024 01:34:49.515336037 CEST	443	55397	20.12.23.50	192.168.2.4
Oct 24, 2024 01:34:49.760996103 CEST	443	55397	20.12.23.50	192.168.2.4
Oct 24, 2024 01:34:49.761056900 CEST	443	55397	20.12.23.50	192.168.2.4
Oct 24, 2024 01:34:49.761077881 CEST	443	55397	20.12.23.50	192.168.2.4
Oct 24, 2024 01:34:49.761135101 CEST	55397	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:34:49.761147022 CEST	443	55397	20.12.23.50	192.168.2.4
Oct 24, 2024 01:34:49.761157990 CEST	443	55397	20.12.23.50	192.168.2.4
Oct 24, 2024 01:34:49.761183023 CEST	55397	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:34:49.761218071 CEST	55397	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:34:49.761951923 CEST	443	55397	20.12.23.50	192.168.2.4
Oct 24, 2024 01:34:49.762027979 CEST	55397	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:34:49.762034893 CEST	443	55397	20.12.23.50	192.168.2.4
Oct 24, 2024 01:34:49.762126923 CEST	443	55397	20.12.23.50	192.168.2.4
Oct 24, 2024 01:34:49.762178898 CEST	55397	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:34:50.347887993 CEST	443	49740	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:50.347945929 CEST	443	49740	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:50.348006964 CEST	49740	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:50.610877991 CEST	55397	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:34:50.610920906 CEST	443	55397	20.12.23.50	192.168.2.4
Oct 24, 2024 01:34:50.610941887 CEST	55397	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:34:50.610953093 CEST	443	55397	20.12.23.50	192.168.2.4
Oct 24, 2024 01:34:50.980261087 CEST	49740	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:50.980323076 CEST	443	49740	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:53.495583057 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:53.495666027 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:53.495739937 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:53.497162104 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:53.497195959 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.382119894 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.382504940 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.382566929 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.383189917 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.383466005 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.384198904 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.384569883 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.385400057 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.385400057 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.385437965 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.385513067 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.431679964 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.431740046 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.478815079 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.693188906 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.693334103 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.693483114 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.693536043 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.693599939 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.693648100 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.701901913 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.703138113 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.703201056 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.711177111 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.711265087 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.711293936 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.711313963 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.711425066 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.811619997 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.811786890 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.811830997 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.811850071 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.811911106 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.811961889 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.817256927 CEST	55427	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:54.817310095 CEST	443	55427	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:54.817508936 CEST	55427	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:54.817765951 CEST	55427	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:54.817779064 CEST	443	55427	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:54.823657990 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.823782921 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.823898077 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.823961020 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.826782942 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.827951908 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.828304052 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.837316036 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.837600946 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.847199917 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.847349882 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.847395897 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.847430944 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.847831011 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.856729031 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.856823921 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.856854916 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.872055054 CEST	55428	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:54.872102976 CEST	443	55428	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:54.872667074 CEST	55428	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:54.872667074 CEST	55428	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:54.872709990 CEST	443	55428	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:54.914093971 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:54.914153099 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:54.966773033 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:55.017019987 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:55.017205000 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:55.017440081 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:55.017455101 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:55.017705917 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:55.018743992 CEST	55422	443	192.168.2.4	142.250.181.238
Oct 24, 2024 01:34:55.018764019 CEST	443	55422	142.250.181.238	192.168.2.4
Oct 24, 2024 01:34:55.676523924 CEST	443	55427	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:55.676839113 CEST	55427	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.676899910 CEST	443	55427	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:55.678464890 CEST	443	55427	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:55.678550005 CEST	55427	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.681010008 CEST	443	55427	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:55.681082964 CEST	55427	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.682291031 CEST	55427	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.682385921 CEST	443	55427	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:55.682523966 CEST	55427	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.682542086 CEST	443	55427	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:55.725981951 CEST	443	55428	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:55.726216078 CEST	55428	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.726232052 CEST	443	55428	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:55.727466106 CEST	443	55428	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:55.727526903 CEST	55428	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.729964018 CEST	443	55428	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:55.730012894 CEST	55428	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.730138063 CEST	55428	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.730305910 CEST	443	55428	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:55.731272936 CEST	55427	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.731679916 CEST	55428	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.731688023 CEST	443	55428	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:55.778228045 CEST	55428	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.957398891 CEST	443	55427	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:55.957844973 CEST	55427	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.957961082 CEST	443	55427	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:55.958029032 CEST	55427	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.958617926 CEST	55432	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.958671093 CEST	443	55432	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:55.958745003 CEST	55432	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.959063053 CEST	55432	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:55.959075928 CEST	443	55432	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.007184982 CEST	443	55428	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.007649899 CEST	55428	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.007957935 CEST	443	55428	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.008019924 CEST	55428	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.008538008 CEST	55434	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.008625031 CEST	443	55434	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.008687973 CEST	55434	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.008878946 CEST	55434	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.008903980 CEST	443	55434	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.812208891 CEST	443	55432	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.812458038 CEST	55432	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.812510014 CEST	443	55432	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.813040018 CEST	443	55432	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.813114882 CEST	55432	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.814032078 CEST	443	55432	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.814106941 CEST	55432	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.814260960 CEST	55432	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.814349890 CEST	443	55432	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.814477921 CEST	55432	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.814500093 CEST	443	55432	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.814537048 CEST	55432	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.855282068 CEST	55432	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.855293989 CEST	443	55432	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.866952896 CEST	443	55434	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.867175102 CEST	55434	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.867185116 CEST	443	55434	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.868438959 CEST	443	55434	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.868505001 CEST	55434	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.870927095 CEST	443	55434	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.870989084 CEST	55434	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.871220112 CEST	55434	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.871306896 CEST	443	55434	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.871421099 CEST	55434	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.871443033 CEST	443	55434	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.871479988 CEST	55434	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:56.915388107 CEST	443	55434	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:56.917757034 CEST	55434	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:57.121499062 CEST	443	55432	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:57.170181036 CEST	443	55434	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:57.171137094 CEST	55432	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:57.171150923 CEST	443	55432	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:57.171956062 CEST	55432	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:57.172146082 CEST	443	55432	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:57.172205925 CEST	55432	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:57.183502913 CEST	55438	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:57.183551073 CEST	443	55438	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:57.183813095 CEST	55438	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:57.183813095 CEST	55438	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:57.183856964 CEST	443	55438	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:57.214072943 CEST	55434	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:57.214082956 CEST	443	55434	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:57.215014935 CEST	55434	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:57.215162992 CEST	443	55434	142.250.186.142	192.168.2.4
Oct 24, 2024 01:34:57.215373993 CEST	55434	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:34:57.357358932 CEST	55440	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:57.357409000 CEST	443	55440	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:57.357623100 CEST	55440	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:57.357876062 CEST	55440	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:57.357894897 CEST	443	55440	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:58.036195040 CEST	443	55438	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:58.036473989 CEST	55438	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:58.036493063 CEST	443	55438	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:58.036842108 CEST	443	55438	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:58.036906958 CEST	55438	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:58.037528038 CEST	443	55438	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:58.037580967 CEST	55438	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:58.037796974 CEST	55438	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:58.037853956 CEST	443	55438	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:58.037950039 CEST	55438	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:58.037957907 CEST	443	55438	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:58.088610888 CEST	55438	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:58.211450100 CEST	443	55440	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:58.211795092 CEST	55440	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:58.211824894 CEST	443	55440	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:58.212383032 CEST	443	55440	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:58.212882996 CEST	55440	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:58.212882996 CEST	55440	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:58.212922096 CEST	443	55440	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:58.213064909 CEST	443	55440	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:58.261689901 CEST	55440	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:58.317500114 CEST	443	55438	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:58.317549944 CEST	443	55438	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:58.317862034 CEST	55438	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:58.317883968 CEST	443	55438	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:58.318705082 CEST	55438	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:58.318743944 CEST	443	55438	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:58.318844080 CEST	55438	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:58.319530010 CEST	55441	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:58.319571018 CEST	443	55441	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:58.319677114 CEST	55441	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:58.320147038 CEST	55441	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:58.320166111 CEST	443	55441	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:58.458834887 CEST	443	55440	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:58.458895922 CEST	443	55440	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:58.458947897 CEST	443	55440	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:58.458998919 CEST	55440	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:58.459013939 CEST	443	55440	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:58.459068060 CEST	443	55440	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:58.459086895 CEST	55440	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:58.459093094 CEST	443	55440	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:58.459573984 CEST	55440	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:58.459844112 CEST	55440	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:58.459877014 CEST	443	55440	142.250.186.100	192.168.2.4
Oct 24, 2024 01:34:58.459942102 CEST	55440	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:34:58.471726894 CEST	55442	443	192.168.2.4	216.58.206.68
Oct 24, 2024 01:34:58.471812010 CEST	443	55442	216.58.206.68	192.168.2.4
Oct 24, 2024 01:34:58.471890926 CEST	55442	443	192.168.2.4	216.58.206.68
Oct 24, 2024 01:34:58.472157955 CEST	55442	443	192.168.2.4	216.58.206.68
Oct 24, 2024 01:34:58.472192049 CEST	443	55442	216.58.206.68	192.168.2.4
Oct 24, 2024 01:34:59.175093889 CEST	443	55441	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:59.175705910 CEST	55441	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:59.175718069 CEST	443	55441	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:59.176928043 CEST	443	55441	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:59.177009106 CEST	55441	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:59.179428101 CEST	443	55441	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:59.179589987 CEST	55441	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:59.179704905 CEST	55441	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:59.179882050 CEST	443	55441	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:59.179923058 CEST	55441	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:59.219851017 CEST	55441	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:59.219866037 CEST	443	55441	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:59.263451099 CEST	55441	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:59.336970091 CEST	443	55442	216.58.206.68	192.168.2.4
Oct 24, 2024 01:34:59.337318897 CEST	55442	443	192.168.2.4	216.58.206.68
Oct 24, 2024 01:34:59.337378979 CEST	443	55442	216.58.206.68	192.168.2.4
Oct 24, 2024 01:34:59.341758013 CEST	443	55442	216.58.206.68	192.168.2.4
Oct 24, 2024 01:34:59.341842890 CEST	55442	443	192.168.2.4	216.58.206.68
Oct 24, 2024 01:34:59.342323065 CEST	55442	443	192.168.2.4	216.58.206.68
Oct 24, 2024 01:34:59.342323065 CEST	55442	443	192.168.2.4	216.58.206.68
Oct 24, 2024 01:34:59.342406034 CEST	443	55442	216.58.206.68	192.168.2.4
Oct 24, 2024 01:34:59.342602968 CEST	443	55442	216.58.206.68	192.168.2.4
Oct 24, 2024 01:34:59.389091969 CEST	55442	443	192.168.2.4	216.58.206.68
Oct 24, 2024 01:34:59.389153004 CEST	443	55442	216.58.206.68	192.168.2.4
Oct 24, 2024 01:34:59.437289953 CEST	55442	443	192.168.2.4	216.58.206.68
Oct 24, 2024 01:34:59.456060886 CEST	443	55441	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:59.456171989 CEST	443	55441	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:59.456549883 CEST	55441	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:59.456559896 CEST	443	55441	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:59.461031914 CEST	55441	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:59.461133003 CEST	443	55441	172.217.18.110	192.168.2.4
Oct 24, 2024 01:34:59.461194038 CEST	55441	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:34:59.589910030 CEST	443	55442	216.58.206.68	192.168.2.4
Oct 24, 2024 01:34:59.590039968 CEST	443	55442	216.58.206.68	192.168.2.4
Oct 24, 2024 01:34:59.590143919 CEST	55442	443	192.168.2.4	216.58.206.68
Oct 24, 2024 01:34:59.590166092 CEST	443	55442	216.58.206.68	192.168.2.4
Oct 24, 2024 01:34:59.590194941 CEST	443	55442	216.58.206.68	192.168.2.4
Oct 24, 2024 01:34:59.590344906 CEST	443	55442	216.58.206.68	192.168.2.4
Oct 24, 2024 01:34:59.590373993 CEST	55442	443	192.168.2.4	216.58.206.68
Oct 24, 2024 01:34:59.590394020 CEST	443	55442	216.58.206.68	192.168.2.4
Oct 24, 2024 01:34:59.590607882 CEST	55442	443	192.168.2.4	216.58.206.68
Oct 24, 2024 01:34:59.592705965 CEST	55442	443	192.168.2.4	216.58.206.68
Oct 24, 2024 01:34:59.593010902 CEST	443	55442	216.58.206.68	192.168.2.4
Oct 24, 2024 01:34:59.593214035 CEST	55442	443	192.168.2.4	216.58.206.68
Oct 24, 2024 01:35:02.111722946 CEST	55443	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:02.111778021 CEST	443	55443	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:02.111880064 CEST	55443	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:02.112380028 CEST	55443	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:02.112400055 CEST	443	55443	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:02.970283031 CEST	443	55443	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:02.973933935 CEST	55443	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:02.973958015 CEST	443	55443	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:02.974503994 CEST	443	55443	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:02.974572897 CEST	55443	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:02.975512981 CEST	443	55443	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:02.975562096 CEST	55443	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:02.975841999 CEST	55443	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:02.975923061 CEST	443	55443	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:02.976010084 CEST	55443	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:02.976021051 CEST	443	55443	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:02.976037979 CEST	55443	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:03.023344994 CEST	443	55443	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:03.028012037 CEST	55443	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:03.257299900 CEST	443	55443	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:03.308876991 CEST	55443	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:03.308900118 CEST	443	55443	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:03.312437057 CEST	55443	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:03.312580109 CEST	443	55443	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:03.312652111 CEST	55443	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:03.321799994 CEST	55444	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:03.321842909 CEST	443	55444	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:03.321921110 CEST	55444	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:03.322134972 CEST	55444	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:03.322146893 CEST	443	55444	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:04.292360067 CEST	443	55444	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:04.292757034 CEST	55444	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:04.292788029 CEST	443	55444	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:04.293308973 CEST	443	55444	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:04.293390036 CEST	55444	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:04.294305086 CEST	443	55444	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:04.294363976 CEST	55444	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:04.294536114 CEST	55444	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:04.294617891 CEST	443	55444	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:04.294687033 CEST	55444	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:04.335345984 CEST	443	55444	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:04.349127054 CEST	55444	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:04.349138975 CEST	443	55444	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:04.395271063 CEST	55444	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:04.808216095 CEST	443	55444	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:04.808259964 CEST	443	55444	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:04.808429003 CEST	55444	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:04.808460951 CEST	443	55444	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:04.811305046 CEST	55444	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:04.811404943 CEST	443	55444	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:04.811600924 CEST	443	55444	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:04.811600924 CEST	55444	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:04.811644077 CEST	55444	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:22.388154030 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:35:22.388212919 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 01:35:24.099180937 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:24.099244118 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:24.099330902 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:24.099637985 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:24.099654913 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:24.852806091 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:24.852875948 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:24.857191086 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:24.857199907 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:24.857595921 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:24.867974997 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:24.911372900 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.117180109 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.117206097 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.117284060 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.117290974 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.117347956 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.117367029 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.117393017 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.237170935 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.237196922 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.237246990 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.237257957 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.237288952 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.237307072 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.355703115 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.355731964 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.355777025 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.355788946 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.355827093 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.355844975 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.474914074 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.474944115 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.474997044 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.475014925 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.475038052 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.475060940 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.594119072 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.594146967 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.594187975 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.594197035 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.594216108 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.594233036 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.625557899 CEST	55446	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:25.625617981 CEST	443	55446	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:25.625874996 CEST	55446	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:25.626132011 CEST	55446	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:25.626166105 CEST	443	55446	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:25.713370085 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.713393927 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.713452101 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.713485003 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.713510036 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.713651896 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.832251072 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.832272053 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.832329035 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.832341909 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.832370043 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.832393885 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.922729969 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.922760963 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.922801018 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.922807932 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.922842979 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.922862053 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.998034954 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.998058081 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.998109102 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.998120070 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:25.998159885 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:25.998168945 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.117650032 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.117691040 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.117738962 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.117753029 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.117820024 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.190654039 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.190684080 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.191596031 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.191618919 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.191951036 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.211698055 CEST	55447	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:26.211745024 CEST	443	55447	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:26.211819887 CEST	55447	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:26.212301016 CEST	55447	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:26.212320089 CEST	443	55447	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:26.309572935 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.309608936 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.309663057 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.309689045 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.309717894 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.309750080 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.356281996 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.356313944 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.356373072 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.356391907 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.356429100 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.356452942 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.429121971 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.429207087 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.429210901 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.429295063 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.429399967 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.429439068 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.429462910 CEST	55445	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.429481983 CEST	443	55445	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.498975992 CEST	55448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.498986959 CEST	443	55448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.499154091 CEST	55448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.500355005 CEST	55449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.500394106 CEST	443	55449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.500488043 CEST	55449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.501569033 CEST	55450	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.501575947 CEST	443	55450	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.501718998 CEST	55450	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.502357960 CEST	55451	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.502376080 CEST	443	55451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.502556086 CEST	55451	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.502856970 CEST	55451	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.502873898 CEST	443	55451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.502942085 CEST	55448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.502953053 CEST	443	55448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.503159046 CEST	55449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.503175020 CEST	443	55449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.504064083 CEST	55452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.504143953 CEST	443	55452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.504175901 CEST	55450	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.504185915 CEST	443	55450	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.504209042 CEST	55452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.504298925 CEST	55452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:26.504326105 CEST	443	55452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:26.514096975 CEST	443	55446	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:26.514394999 CEST	55446	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:26.514432907 CEST	443	55446	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:26.514951944 CEST	443	55446	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:26.515028954 CEST	55446	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:26.515955925 CEST	443	55446	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:26.516016006 CEST	55446	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:26.516202927 CEST	55446	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:26.516287088 CEST	443	55446	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:26.516560078 CEST	55446	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:26.516575098 CEST	443	55446	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:26.516673088 CEST	55446	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:26.559357882 CEST	443	55446	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:26.809626102 CEST	443	55446	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:26.854993105 CEST	55446	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:26.855022907 CEST	443	55446	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:26.855503082 CEST	55446	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:26.855600119 CEST	443	55446	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:26.855665922 CEST	55446	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:26.859886885 CEST	55453	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:26.859968901 CEST	443	55453	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:26.860153913 CEST	55453	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:26.860384941 CEST	55453	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:26.860421896 CEST	443	55453	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:27.067248106 CEST	443	55447	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:27.067670107 CEST	55447	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:27.067729950 CEST	443	55447	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:27.069238901 CEST	443	55447	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:27.069668055 CEST	55447	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:27.069850922 CEST	443	55447	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:27.069931984 CEST	55447	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:27.069960117 CEST	55447	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:27.070040941 CEST	443	55447	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:27.243756056 CEST	443	55449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.246335983 CEST	443	55448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.256897926 CEST	443	55451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.261620045 CEST	443	55452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.261995077 CEST	55449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.262017012 CEST	443	55449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.272223949 CEST	55449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.272229910 CEST	443	55449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.275407076 CEST	55452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.275480986 CEST	443	55452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.284828901 CEST	55452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.284845114 CEST	443	55452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.287880898 CEST	55448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.287904978 CEST	443	55448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.296799898 CEST	55448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.296806097 CEST	443	55448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.299881935 CEST	55451	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.299896002 CEST	443	55451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.302823067 CEST	55451	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.302826881 CEST	443	55451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.314573050 CEST	443	55450	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.319725990 CEST	55450	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.319736958 CEST	443	55450	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.327250004 CEST	55450	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.327253103 CEST	443	55450	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.350573063 CEST	443	55447	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:27.398704052 CEST	443	55449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.398732901 CEST	443	55449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.398788929 CEST	443	55449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.398793936 CEST	55449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.398833990 CEST	55449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.399092913 CEST	55449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.399111986 CEST	443	55449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.399121046 CEST	55449	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.399125099 CEST	443	55449	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.402247906 CEST	55454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.402331114 CEST	443	55454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.402410030 CEST	55454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.402570963 CEST	55454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.402602911 CEST	443	55454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.405096054 CEST	55447	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:27.405155897 CEST	443	55447	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:27.405576944 CEST	55447	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:27.405715942 CEST	443	55447	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:27.405780077 CEST	55447	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:27.413948059 CEST	443	55452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.414166927 CEST	443	55452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.414230108 CEST	55452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.414289951 CEST	55452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.414289951 CEST	55452	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.414313078 CEST	443	55452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.414335012 CEST	443	55452	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.416429043 CEST	55455	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.416460991 CEST	443	55455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.416675091 CEST	55455	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.416735888 CEST	55455	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.416749954 CEST	443	55455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.432676077 CEST	443	55448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.432696104 CEST	443	55448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.432744026 CEST	443	55448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.432755947 CEST	55448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.432787895 CEST	55448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.433109999 CEST	55448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.433118105 CEST	443	55448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.433128119 CEST	55448	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.433132887 CEST	443	55448	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.436214924 CEST	55456	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.436299086 CEST	443	55456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.436393023 CEST	55456	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.436566114 CEST	55456	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.436604023 CEST	443	55456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.454411030 CEST	443	55450	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.454457045 CEST	443	55450	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.454576015 CEST	443	55450	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.454619884 CEST	55450	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.454658031 CEST	55450	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.454719067 CEST	55450	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.454722881 CEST	443	55450	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.454739094 CEST	55450	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.454741955 CEST	443	55450	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.457098007 CEST	55457	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.457158089 CEST	443	55457	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.457235098 CEST	55457	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.457389116 CEST	55457	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.457418919 CEST	443	55457	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.526767015 CEST	443	55451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.526917934 CEST	443	55451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.527251959 CEST	55451	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.527357101 CEST	55451	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.527357101 CEST	55451	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.527370930 CEST	443	55451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.527378082 CEST	443	55451	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.529409885 CEST	55458	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.529459000 CEST	443	55458	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.529546976 CEST	55458	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.529745102 CEST	55458	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:27.529774904 CEST	443	55458	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:27.707082033 CEST	443	55453	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:27.707412004 CEST	55453	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:27.707443953 CEST	443	55453	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:27.709026098 CEST	443	55453	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:27.709108114 CEST	55453	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:27.711544037 CEST	443	55453	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:27.711618900 CEST	55453	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:27.711807966 CEST	55453	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:27.711918116 CEST	443	55453	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:27.711945057 CEST	55453	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:27.755307913 CEST	55453	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:27.755383015 CEST	443	55453	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:27.801170111 CEST	55453	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:27.826729059 CEST	55459	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:35:27.826817989 CEST	443	55459	20.12.23.50	192.168.2.4
Oct 24, 2024 01:35:27.826913118 CEST	55459	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:35:27.827240944 CEST	55459	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:35:27.827276945 CEST	443	55459	20.12.23.50	192.168.2.4
Oct 24, 2024 01:35:27.985971928 CEST	443	55453	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:27.986083984 CEST	443	55453	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:27.986327887 CEST	55453	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:27.986358881 CEST	443	55453	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:27.987201929 CEST	55453	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:27.987329006 CEST	443	55453	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:27.987601995 CEST	55453	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:28.137634993 CEST	443	55454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.138128996 CEST	55454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.138169050 CEST	443	55454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.139373064 CEST	55454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.139384985 CEST	443	55454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.143336058 CEST	443	55455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.143949986 CEST	55455	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.143970966 CEST	443	55455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.144737959 CEST	55455	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.144742966 CEST	443	55455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.185774088 CEST	443	55456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.186613083 CEST	55456	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.186675072 CEST	443	55456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.187274933 CEST	55456	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.187289000 CEST	443	55456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.199484110 CEST	443	55457	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.202568054 CEST	55457	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.202610016 CEST	443	55457	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.203166008 CEST	55457	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.203183889 CEST	443	55457	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.269628048 CEST	443	55454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.269843102 CEST	443	55454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.270059109 CEST	55454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.270284891 CEST	55454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.270337105 CEST	443	55454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.270369053 CEST	55454	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.270384073 CEST	443	55454	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.274898052 CEST	443	55455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.275471926 CEST	443	55455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.275538921 CEST	55455	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.275916100 CEST	55460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.275999069 CEST	443	55460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.276084900 CEST	55460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.276271105 CEST	55455	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.276285887 CEST	443	55455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.276293993 CEST	55455	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.276299000 CEST	443	55455	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.276555061 CEST	55460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.276588917 CEST	443	55460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.279151917 CEST	443	55458	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.281166077 CEST	55458	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.281224966 CEST	443	55458	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.281837940 CEST	55458	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.281851053 CEST	443	55458	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.284404993 CEST	55461	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.284497023 CEST	443	55461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.284579039 CEST	55461	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.284873962 CEST	55461	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.284909964 CEST	443	55461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.319736958 CEST	443	55456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.319801092 CEST	443	55456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.320023060 CEST	55456	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.320334911 CEST	55456	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.320334911 CEST	55456	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.320378065 CEST	443	55456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.320408106 CEST	443	55456	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.323569059 CEST	55462	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.323652029 CEST	443	55462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.323724985 CEST	55462	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.326091051 CEST	55462	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.326124907 CEST	443	55462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.334641933 CEST	443	55457	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.334775925 CEST	443	55457	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.334836960 CEST	55457	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.335020065 CEST	55457	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.335020065 CEST	55457	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.335062027 CEST	443	55457	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.335094929 CEST	443	55457	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.338659048 CEST	55463	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.338747025 CEST	443	55463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.338885069 CEST	55463	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.339415073 CEST	55463	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.339451075 CEST	443	55463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.411103010 CEST	443	55458	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.411303997 CEST	443	55458	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.411391020 CEST	55458	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.411592960 CEST	55458	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.411617041 CEST	443	55458	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.411658049 CEST	55458	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.411672115 CEST	443	55458	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.424164057 CEST	55464	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.424184084 CEST	443	55464	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.424329996 CEST	55464	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.424945116 CEST	55464	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:28.424957037 CEST	443	55464	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:28.672197104 CEST	443	55459	20.12.23.50	192.168.2.4
Oct 24, 2024 01:35:28.672276020 CEST	55459	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:35:28.675324917 CEST	55459	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:35:28.675340891 CEST	443	55459	20.12.23.50	192.168.2.4
Oct 24, 2024 01:35:28.675692081 CEST	443	55459	20.12.23.50	192.168.2.4
Oct 24, 2024 01:35:28.690934896 CEST	55459	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:35:28.731333017 CEST	443	55459	20.12.23.50	192.168.2.4
Oct 24, 2024 01:35:28.970175028 CEST	443	55459	20.12.23.50	192.168.2.4
Oct 24, 2024 01:35:28.970243931 CEST	443	55459	20.12.23.50	192.168.2.4
Oct 24, 2024 01:35:28.970288038 CEST	443	55459	20.12.23.50	192.168.2.4
Oct 24, 2024 01:35:28.970319033 CEST	55459	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:35:28.970390081 CEST	443	55459	20.12.23.50	192.168.2.4
Oct 24, 2024 01:35:28.970429897 CEST	55459	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:35:28.970449924 CEST	55459	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:35:29.028184891 CEST	443	55460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.028680086 CEST	55460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.028758049 CEST	443	55460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.029092073 CEST	55460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.029108047 CEST	443	55460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.040846109 CEST	443	55461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.041347980 CEST	55461	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.041426897 CEST	443	55461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.041731119 CEST	55461	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.041744947 CEST	443	55461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.060472965 CEST	443	55462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.060946941 CEST	55462	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.060982943 CEST	443	55462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.061419010 CEST	55462	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.061431885 CEST	443	55462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.079090118 CEST	443	55463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.079425097 CEST	55463	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.079458952 CEST	443	55463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.079767942 CEST	55463	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.079783916 CEST	443	55463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.086560965 CEST	443	55459	20.12.23.50	192.168.2.4
Oct 24, 2024 01:35:29.086622000 CEST	443	55459	20.12.23.50	192.168.2.4
Oct 24, 2024 01:35:29.086642027 CEST	55459	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:35:29.086654902 CEST	443	55459	20.12.23.50	192.168.2.4
Oct 24, 2024 01:35:29.086682081 CEST	55459	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:35:29.086776972 CEST	443	55459	20.12.23.50	192.168.2.4
Oct 24, 2024 01:35:29.086827040 CEST	55459	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:35:29.086853027 CEST	55459	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:35:29.086869001 CEST	443	55459	20.12.23.50	192.168.2.4
Oct 24, 2024 01:35:29.086882114 CEST	55459	443	192.168.2.4	20.12.23.50
Oct 24, 2024 01:35:29.086888075 CEST	443	55459	20.12.23.50	192.168.2.4
Oct 24, 2024 01:35:29.162507057 CEST	443	55460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.162633896 CEST	443	55460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.162705898 CEST	55460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.162919998 CEST	55460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.162964106 CEST	443	55460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.162997961 CEST	55460	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.163014889 CEST	443	55460	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.166009903 CEST	55465	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.166048050 CEST	443	55465	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.166110992 CEST	55465	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.166235924 CEST	443	55464	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.166336060 CEST	55465	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.166356087 CEST	443	55465	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.166677952 CEST	55464	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.166706085 CEST	443	55464	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.167067051 CEST	55464	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.167074919 CEST	443	55464	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.174086094 CEST	443	55461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.174289942 CEST	443	55461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.174360037 CEST	55461	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.174403906 CEST	55461	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.174403906 CEST	55461	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.174424887 CEST	443	55461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.174437046 CEST	443	55461	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.176234007 CEST	55466	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.176259995 CEST	443	55466	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.176342010 CEST	55466	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.176469088 CEST	55466	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.176482916 CEST	443	55466	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.192859888 CEST	443	55462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.192907095 CEST	443	55462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.193006992 CEST	55462	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.193165064 CEST	55462	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.193165064 CEST	55462	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.193190098 CEST	443	55462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.193212032 CEST	443	55462	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.195142031 CEST	55467	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.195171118 CEST	443	55467	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.195240021 CEST	55467	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.195370913 CEST	55467	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.195389032 CEST	443	55467	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.213553905 CEST	443	55463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.213704109 CEST	443	55463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.213768959 CEST	55463	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.213850975 CEST	55463	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.213864088 CEST	443	55463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.213876009 CEST	55463	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.213881969 CEST	443	55463	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.215981960 CEST	55468	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.216065884 CEST	443	55468	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.216145039 CEST	55468	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.216250896 CEST	55468	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.216274977 CEST	443	55468	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.307437897 CEST	443	55464	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.307617903 CEST	443	55464	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.307682037 CEST	55464	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.307780981 CEST	55464	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.307780981 CEST	55464	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.307797909 CEST	443	55464	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.307811022 CEST	443	55464	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.310203075 CEST	55469	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.310230970 CEST	443	55469	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.310323000 CEST	55469	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.310436964 CEST	55469	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.310451984 CEST	443	55469	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.394165039 CEST	55470	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:29.394186020 CEST	443	55470	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:29.394283056 CEST	55470	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:29.394591093 CEST	55470	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:29.394604921 CEST	443	55470	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:29.912679911 CEST	443	55465	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.914141893 CEST	55465	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.914165020 CEST	443	55465	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.915426016 CEST	55465	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.915431023 CEST	443	55465	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.925573111 CEST	443	55467	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.926443100 CEST	55467	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.926457882 CEST	443	55467	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.927499056 CEST	55467	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.927504063 CEST	443	55467	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.929366112 CEST	443	55466	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.929932117 CEST	55466	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.929956913 CEST	443	55466	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.930694103 CEST	55466	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.930699110 CEST	443	55466	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.966865063 CEST	443	55468	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.967468023 CEST	55468	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.967508078 CEST	443	55468	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:29.968203068 CEST	55468	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:29.968214035 CEST	443	55468	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.042531013 CEST	443	55465	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.042691946 CEST	443	55465	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.042901993 CEST	55465	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.043757915 CEST	55465	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.043757915 CEST	55465	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.043775082 CEST	443	55465	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.043782949 CEST	443	55465	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.049530029 CEST	55471	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.049561024 CEST	443	55471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.049985886 CEST	55471	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.049985886 CEST	55471	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.050019026 CEST	443	55471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.056309938 CEST	443	55467	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.056654930 CEST	443	55467	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.056715965 CEST	55467	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.056799889 CEST	55467	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.056807995 CEST	443	55467	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.056818008 CEST	55467	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.056822062 CEST	443	55467	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.059768915 CEST	443	55466	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.059823990 CEST	55472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.059849024 CEST	443	55472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.059914112 CEST	55472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.059986115 CEST	443	55466	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.060087919 CEST	55466	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.060173988 CEST	55466	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.060173988 CEST	55466	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.060188055 CEST	443	55466	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.060198069 CEST	443	55466	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.061197042 CEST	55472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.061213017 CEST	443	55472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.063657045 CEST	55473	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.063677073 CEST	443	55473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.063776016 CEST	55473	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.063951969 CEST	55473	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.063965082 CEST	443	55473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.075659990 CEST	443	55469	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.076226950 CEST	55469	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.076241970 CEST	443	55469	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.076931953 CEST	55469	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.076936960 CEST	443	55469	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.100661993 CEST	443	55468	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.100795031 CEST	443	55468	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.100919962 CEST	55468	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.101105928 CEST	55468	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.101129055 CEST	443	55468	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.101193905 CEST	55468	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.101207972 CEST	443	55468	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.104191065 CEST	55474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.104212046 CEST	443	55474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.104417086 CEST	55474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.104502916 CEST	55474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.104512930 CEST	443	55474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.208084106 CEST	443	55469	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.208244085 CEST	443	55469	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.208306074 CEST	55469	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.208743095 CEST	55469	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.208760977 CEST	443	55469	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.208801985 CEST	55469	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.208806992 CEST	443	55469	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.212760925 CEST	55475	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.212779999 CEST	443	55475	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.212860107 CEST	55475	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.213325977 CEST	55475	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.213340044 CEST	443	55475	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.262387037 CEST	443	55470	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:30.262892962 CEST	55470	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:30.262903929 CEST	443	55470	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:30.263433933 CEST	443	55470	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:30.263515949 CEST	55470	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:30.264431000 CEST	443	55470	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:30.264507055 CEST	55470	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:30.264898062 CEST	55470	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:30.264976025 CEST	443	55470	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:30.265208006 CEST	55470	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:30.265208006 CEST	55470	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:30.265224934 CEST	443	55470	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:30.309412003 CEST	55470	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:30.548156977 CEST	443	55470	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:30.595814943 CEST	55470	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:30.595827103 CEST	443	55470	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:30.597099066 CEST	55470	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:30.597368956 CEST	443	55470	142.250.186.142	192.168.2.4
Oct 24, 2024 01:35:30.597464085 CEST	55470	443	192.168.2.4	142.250.186.142
Oct 24, 2024 01:35:30.607328892 CEST	55476	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:30.607409954 CEST	443	55476	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:30.607508898 CEST	55476	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:30.608026981 CEST	55476	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:30.608061075 CEST	443	55476	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:30.793812990 CEST	443	55471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.794342041 CEST	55471	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.794358969 CEST	443	55471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.794874907 CEST	55471	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.794886112 CEST	443	55471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.799462080 CEST	443	55472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.799810886 CEST	55472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.799828053 CEST	443	55472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.800234079 CEST	55472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.800239086 CEST	443	55472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.810067892 CEST	443	55473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.810420990 CEST	55473	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.810441017 CEST	443	55473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.810797930 CEST	55473	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.810803890 CEST	443	55473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.852123022 CEST	443	55474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.852677107 CEST	55474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.852699041 CEST	443	55474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.853121996 CEST	55474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.853127956 CEST	443	55474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.928406954 CEST	443	55471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.928895950 CEST	443	55471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.928939104 CEST	55471	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.928983927 CEST	55471	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.929008961 CEST	443	55471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.929049969 CEST	55471	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.929056883 CEST	443	55471	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.931499958 CEST	443	55472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.931791067 CEST	443	55472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.931828022 CEST	55472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.932483912 CEST	55477	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.932554007 CEST	443	55477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.932626009 CEST	55477	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.932627916 CEST	55472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.932651043 CEST	55472	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.932651997 CEST	443	55472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.932657003 CEST	443	55472	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.934026957 CEST	55477	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.934061050 CEST	443	55477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.935441971 CEST	55478	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.935473919 CEST	443	55478	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.935527086 CEST	55478	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.935662985 CEST	55478	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.935687065 CEST	443	55478	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.940324068 CEST	443	55473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.940475941 CEST	443	55473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.940526962 CEST	55473	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.943123102 CEST	55473	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.943136930 CEST	443	55473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.943150043 CEST	55473	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.943157911 CEST	443	55473	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.945314884 CEST	55479	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.945338964 CEST	443	55479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.945415974 CEST	55479	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.945696115 CEST	55479	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.945719957 CEST	443	55479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.964343071 CEST	443	55475	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.965186119 CEST	55475	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.965202093 CEST	443	55475	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.965862036 CEST	55475	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.965867043 CEST	443	55475	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.985323906 CEST	443	55474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.985411882 CEST	443	55474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.985451937 CEST	55474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.985524893 CEST	55474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.985532999 CEST	443	55474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.985541105 CEST	55474	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.985544920 CEST	443	55474	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.988497972 CEST	55480	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.988559008 CEST	443	55480	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:30.988624096 CEST	55480	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.988746881 CEST	55480	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:30.988773108 CEST	443	55480	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.094283104 CEST	443	55475	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.094419956 CEST	443	55475	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.094470024 CEST	55475	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.094546080 CEST	55475	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.094552994 CEST	443	55475	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.094566107 CEST	55475	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.094571114 CEST	443	55475	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.096798897 CEST	55481	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.096857071 CEST	443	55481	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.096934080 CEST	55481	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.097073078 CEST	55481	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.097090960 CEST	443	55481	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.474839926 CEST	443	55476	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:31.475169897 CEST	55476	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:31.475210905 CEST	443	55476	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:31.476782084 CEST	443	55476	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:31.476876974 CEST	55476	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:31.479271889 CEST	443	55476	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:31.479357958 CEST	55476	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:31.479494095 CEST	55476	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:31.479666948 CEST	55476	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:31.479679108 CEST	443	55476	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:31.523350000 CEST	443	55476	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:31.529226065 CEST	55476	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:31.529241085 CEST	443	55476	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:31.579509020 CEST	55476	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:31.676254988 CEST	443	55477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.676753998 CEST	443	55478	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.690080881 CEST	55477	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.690154076 CEST	443	55477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.690993071 CEST	55477	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.691011906 CEST	443	55477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.691515923 CEST	55478	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.691534042 CEST	443	55478	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.691940069 CEST	55478	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.691947937 CEST	443	55478	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.697102070 CEST	443	55479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.706931114 CEST	55479	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.706962109 CEST	443	55479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.707815886 CEST	55479	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.707827091 CEST	443	55479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.757452965 CEST	443	55476	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:31.757574081 CEST	443	55476	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:31.757663965 CEST	55476	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:31.757725954 CEST	443	55476	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:31.809533119 CEST	55476	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:31.819051027 CEST	443	55478	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.819207907 CEST	443	55478	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.819282055 CEST	55478	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.821782112 CEST	443	55477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.821850061 CEST	443	55477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.821952105 CEST	55477	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.831013918 CEST	55478	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.831031084 CEST	443	55478	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.832803011 CEST	55477	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.832803011 CEST	55477	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.832901001 CEST	443	55477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.832935095 CEST	443	55477	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.836684942 CEST	443	55479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.836896896 CEST	443	55479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.836966038 CEST	55479	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.837393999 CEST	443	55480	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.838915110 CEST	55476	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:31.839236975 CEST	443	55476	172.217.18.110	192.168.2.4
Oct 24, 2024 01:35:31.839386940 CEST	55476	443	192.168.2.4	172.217.18.110
Oct 24, 2024 01:35:31.880263090 CEST	55480	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.905916929 CEST	443	55481	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.913424969 CEST	55479	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.913510084 CEST	443	55479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.913577080 CEST	55479	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.913595915 CEST	443	55479	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.916937113 CEST	55480	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.916990042 CEST	443	55480	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.917443037 CEST	55480	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.917496920 CEST	443	55480	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.934227943 CEST	55481	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.934298992 CEST	443	55481	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:31.935111046 CEST	55481	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:31.935164928 CEST	443	55481	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.046268940 CEST	443	55480	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.046422958 CEST	443	55480	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.046489954 CEST	55480	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.054347992 CEST	55482	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.054382086 CEST	443	55482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.054536104 CEST	55482	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.058125019 CEST	55483	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.058207035 CEST	443	55483	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.058288097 CEST	55483	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.063960075 CEST	443	55481	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.064150095 CEST	443	55481	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.064268112 CEST	55481	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.064853907 CEST	55484	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.064872980 CEST	443	55484	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.064939976 CEST	55484	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.081496954 CEST	55480	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.081497908 CEST	55484	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.081515074 CEST	443	55480	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.081525087 CEST	443	55484	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.081549883 CEST	55480	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.081557989 CEST	443	55480	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.081886053 CEST	55481	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.081886053 CEST	55481	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.081950903 CEST	443	55481	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.081986904 CEST	443	55481	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.093966961 CEST	55482	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.094006062 CEST	443	55482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.102088928 CEST	55483	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.102163076 CEST	443	55483	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.134741068 CEST	55485	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.134838104 CEST	443	55485	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.134989977 CEST	55485	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.136022091 CEST	55486	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.136042118 CEST	443	55486	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.136209011 CEST	55486	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.136487007 CEST	55485	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.136519909 CEST	443	55485	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.137077093 CEST	55486	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.137099981 CEST	443	55486	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.813581944 CEST	443	55484	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.814269066 CEST	55484	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.814356089 CEST	443	55484	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.814721107 CEST	55484	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.814738035 CEST	443	55484	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.835181952 CEST	443	55482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.835572004 CEST	55482	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.835619926 CEST	443	55482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.835975885 CEST	55482	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.835988998 CEST	443	55482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.850235939 CEST	443	55483	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.850541115 CEST	55483	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.850617886 CEST	443	55483	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.850969076 CEST	55483	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.851022959 CEST	443	55483	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.876449108 CEST	443	55486	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.876848936 CEST	55486	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.876883984 CEST	443	55486	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.877214909 CEST	55486	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.877227068 CEST	443	55486	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.883599997 CEST	443	55485	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.884016037 CEST	55485	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.884097099 CEST	443	55485	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.884243011 CEST	55485	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.884258986 CEST	443	55485	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.942982912 CEST	443	55484	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.943350077 CEST	443	55484	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.943541050 CEST	55484	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.943542004 CEST	55484	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.943542004 CEST	55484	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.946796894 CEST	55487	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.946883917 CEST	443	55487	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.947024107 CEST	55487	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.947206020 CEST	55487	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.947238922 CEST	443	55487	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.967144966 CEST	443	55482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.967632055 CEST	443	55482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.967694044 CEST	55482	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.967771053 CEST	55482	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.967771053 CEST	55482	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.967807055 CEST	443	55482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.967833996 CEST	443	55482	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.969849110 CEST	55488	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.969932079 CEST	443	55488	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.970019102 CEST	55488	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.970139027 CEST	55488	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.970170021 CEST	443	55488	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.981369972 CEST	443	55483	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.981529951 CEST	443	55483	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.981601954 CEST	55483	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.981678963 CEST	55483	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.981678963 CEST	55483	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.981736898 CEST	443	55483	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.981766939 CEST	443	55483	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.983464956 CEST	55489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.983536959 CEST	443	55489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:32.983608961 CEST	55489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.983733892 CEST	55489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:32.983758926 CEST	443	55489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.010173082 CEST	443	55486	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.010328054 CEST	443	55486	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.010394096 CEST	55486	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.010575056 CEST	55486	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.010576010 CEST	55486	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.010606050 CEST	443	55486	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.010631084 CEST	443	55486	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.013803959 CEST	55490	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.013885975 CEST	443	55490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.014158010 CEST	55490	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.014295101 CEST	55490	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.014327049 CEST	443	55490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.016513109 CEST	443	55485	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.016666889 CEST	443	55485	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.016736031 CEST	55485	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.016787052 CEST	55485	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.016787052 CEST	55485	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.016817093 CEST	443	55485	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.016843081 CEST	443	55485	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.018976927 CEST	55491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.019011021 CEST	443	55491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.019078016 CEST	55491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.019232035 CEST	55491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.019263029 CEST	443	55491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.248619080 CEST	55484	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.248655081 CEST	443	55484	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.681364059 CEST	443	55487	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.681902885 CEST	55487	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.681937933 CEST	443	55487	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.682363033 CEST	55487	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.682370901 CEST	443	55487	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.708662987 CEST	443	55488	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.709211111 CEST	55488	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.709290028 CEST	443	55488	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.709861040 CEST	55488	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.709913969 CEST	443	55488	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.730209112 CEST	443	55489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.730665922 CEST	55489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.730748892 CEST	443	55489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.731065989 CEST	55489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.731081009 CEST	443	55489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.741455078 CEST	443	55491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.741776943 CEST	55491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.741806984 CEST	443	55491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.742136002 CEST	55491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.742146015 CEST	443	55491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.751588106 CEST	443	55490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.751878977 CEST	55490	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.751926899 CEST	443	55490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.752207994 CEST	55490	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.752223969 CEST	443	55490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.811193943 CEST	443	55487	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.811378002 CEST	443	55487	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.811450005 CEST	55487	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.811499119 CEST	55487	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.811499119 CEST	55487	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.811531067 CEST	443	55487	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.811553001 CEST	443	55487	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.814275026 CEST	55492	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.814335108 CEST	443	55492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.814564943 CEST	55492	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.814564943 CEST	55492	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.814691067 CEST	443	55492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.843909979 CEST	443	55488	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.844152927 CEST	443	55488	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.844234943 CEST	55488	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.844279051 CEST	55488	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.844293118 CEST	443	55488	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.844320059 CEST	55488	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.844332933 CEST	443	55488	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.846607924 CEST	55493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.846692085 CEST	443	55493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.846784115 CEST	55493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.846909046 CEST	55493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.846946955 CEST	443	55493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.862806082 CEST	443	55489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.862855911 CEST	443	55489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.863059044 CEST	55489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.863059044 CEST	55489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.863059044 CEST	55489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.865011930 CEST	55494	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.865070105 CEST	443	55494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.865238905 CEST	55494	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.865350962 CEST	55494	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.865381002 CEST	443	55494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.869914055 CEST	443	55491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.870088100 CEST	443	55491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.870137930 CEST	55491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.870383024 CEST	55491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.870426893 CEST	443	55491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.870456934 CEST	55491	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.870472908 CEST	443	55491	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.872276068 CEST	55495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.872361898 CEST	443	55495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.872446060 CEST	55495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.872745037 CEST	55495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.872805119 CEST	443	55495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.881836891 CEST	443	55490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.882047892 CEST	443	55490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.882114887 CEST	55490	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.882148981 CEST	55490	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.882148981 CEST	55490	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.882164955 CEST	443	55490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.882184029 CEST	443	55490	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.883882046 CEST	55496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.883972883 CEST	443	55496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:33.884123087 CEST	55496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.884236097 CEST	55496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:33.884254932 CEST	443	55496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.167856932 CEST	55489	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.167927027 CEST	443	55489	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.561316967 CEST	443	55492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.562334061 CEST	55492	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.562334061 CEST	55492	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.562376022 CEST	443	55492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.562398911 CEST	443	55492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.576822042 CEST	443	55493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.577322006 CEST	55493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.577406883 CEST	443	55493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.577699900 CEST	55493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.577714920 CEST	443	55493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.603460073 CEST	443	55495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.604154110 CEST	55495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.604155064 CEST	55495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.604187965 CEST	443	55495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.604197979 CEST	443	55495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.610378027 CEST	443	55494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.611073017 CEST	55494	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.611073017 CEST	55494	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.611105919 CEST	443	55494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.611126900 CEST	443	55494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.628755093 CEST	443	55496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.629147053 CEST	55496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.629204035 CEST	443	55496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.632880926 CEST	55496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.632934093 CEST	443	55496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.691060066 CEST	443	55492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.691205025 CEST	443	55492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.691382885 CEST	55492	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.691382885 CEST	55492	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.691611052 CEST	55492	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.691636086 CEST	443	55492	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.694052935 CEST	55498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.694134951 CEST	443	55498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.694252014 CEST	55498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.694346905 CEST	55498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.694365025 CEST	443	55498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.706389904 CEST	443	55493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.706609011 CEST	443	55493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.706727028 CEST	55493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.706727982 CEST	55493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.706727982 CEST	55493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.708709002 CEST	55499	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.708750010 CEST	443	55499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.708898067 CEST	55499	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.709014893 CEST	55499	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.709027052 CEST	443	55499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.747890949 CEST	443	55494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.748689890 CEST	443	55494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.748768091 CEST	55494	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.748843908 CEST	55494	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.748859882 CEST	443	55494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.748897076 CEST	55494	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.748910904 CEST	443	55494	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.751471996 CEST	55500	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.751539946 CEST	443	55500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.751895905 CEST	55500	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.751895905 CEST	55500	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.751928091 CEST	443	55500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.761543989 CEST	443	55496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.761611938 CEST	443	55496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.761760950 CEST	55496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.761760950 CEST	55496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.762218952 CEST	55496	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.762238026 CEST	443	55496	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.763724089 CEST	55501	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.763756990 CEST	443	55501	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.763923883 CEST	55501	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.763923883 CEST	55501	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.763953924 CEST	443	55501	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.942923069 CEST	443	55495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.943073034 CEST	443	55495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.943222046 CEST	55495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.943222046 CEST	55495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.943332911 CEST	55495	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.943357944 CEST	443	55495	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.945707083 CEST	55502	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.945729017 CEST	443	55502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:34.945883036 CEST	55502	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.946042061 CEST	55502	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:34.946054935 CEST	443	55502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.012145042 CEST	55493	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.012187004 CEST	443	55493	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.449600935 CEST	443	55498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.450138092 CEST	55498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.450171947 CEST	443	55498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.450582027 CEST	55498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.450592995 CEST	443	55498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.455969095 CEST	443	55499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.456428051 CEST	55499	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.456444025 CEST	443	55499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.456875086 CEST	55499	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.456878901 CEST	443	55499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.491460085 CEST	443	55501	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.491909981 CEST	55501	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.491929054 CEST	443	55501	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.492321014 CEST	55501	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.492326975 CEST	443	55501	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.500255108 CEST	443	55500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.500648975 CEST	55500	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.500674963 CEST	443	55500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.501039028 CEST	55500	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.501044989 CEST	443	55500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.578351974 CEST	443	55498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.578528881 CEST	443	55498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.578712940 CEST	55498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.578712940 CEST	55498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.578794956 CEST	55498	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.578831911 CEST	443	55498	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.581727982 CEST	55503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.581763029 CEST	443	55503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.581819057 CEST	55503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.581980944 CEST	55503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.581996918 CEST	443	55503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.590297937 CEST	443	55499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.590370893 CEST	443	55499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.590437889 CEST	55499	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.590516090 CEST	55499	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.590516090 CEST	55499	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.590532064 CEST	443	55499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.590539932 CEST	443	55499	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.592736006 CEST	55504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.592760086 CEST	443	55504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.592812061 CEST	55504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.592961073 CEST	55504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.592978954 CEST	443	55504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.620548964 CEST	443	55501	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.620731115 CEST	443	55501	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.620785952 CEST	55501	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.620806932 CEST	55501	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.620816946 CEST	443	55501	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.620826960 CEST	55501	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.620831013 CEST	443	55501	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.623018980 CEST	55505	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.623101950 CEST	443	55505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.623191118 CEST	55505	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.623343945 CEST	55505	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.623378038 CEST	443	55505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.631870031 CEST	443	55500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.632139921 CEST	443	55500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.632198095 CEST	55500	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.632225990 CEST	55500	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.632236004 CEST	443	55500	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.635291100 CEST	55506	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.635319948 CEST	443	55506	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.635544062 CEST	55506	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.635658979 CEST	55506	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.635670900 CEST	443	55506	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.683368921 CEST	443	55502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.684082031 CEST	55502	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.684098005 CEST	443	55502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.684688091 CEST	55502	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.684693098 CEST	443	55502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.816580057 CEST	443	55502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.816804886 CEST	443	55502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.816874027 CEST	55502	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.816955090 CEST	55502	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.816967010 CEST	443	55502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.816978931 CEST	55502	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.816984892 CEST	443	55502	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.820420980 CEST	55507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.820503950 CEST	443	55507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:35.820590019 CEST	55507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.820779085 CEST	55507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:35.820816994 CEST	443	55507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.179771900 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 24, 2024 01:35:36.185714960 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 24, 2024 01:35:36.185777903 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 24, 2024 01:35:36.321512938 CEST	443	55503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.322007895 CEST	55503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.322031975 CEST	443	55503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.322560072 CEST	55503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.322565079 CEST	443	55503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.330028057 CEST	443	55504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.331309080 CEST	55504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.331325054 CEST	443	55504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.331850052 CEST	55504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.331854105 CEST	443	55504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.364492893 CEST	443	55505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.365180969 CEST	55505	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.365180969 CEST	55505	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.365262032 CEST	443	55505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.365292072 CEST	443	55505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.381870985 CEST	443	55506	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.382190943 CEST	55506	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.382213116 CEST	443	55506	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.382531881 CEST	55506	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.382543087 CEST	443	55506	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.451726913 CEST	443	55503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.451920986 CEST	443	55503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.452011108 CEST	55503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.452011108 CEST	55503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.452227116 CEST	55503	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.452239990 CEST	443	55503	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.454760075 CEST	55508	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.454782009 CEST	443	55508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.454962015 CEST	55508	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.454962015 CEST	55508	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.454988003 CEST	443	55508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.464245081 CEST	443	55504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.464354038 CEST	443	55504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.464483023 CEST	55504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.464483023 CEST	55504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.464483023 CEST	55504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.467325926 CEST	55509	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.467349052 CEST	443	55509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.467492104 CEST	55509	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.467520952 CEST	55509	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.467528105 CEST	443	55509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.495331049 CEST	443	55505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.495464087 CEST	443	55505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.495665073 CEST	55505	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.495824099 CEST	55505	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.495825052 CEST	55505	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.495857954 CEST	443	55505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.495883942 CEST	443	55505	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.498234034 CEST	55510	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.498255014 CEST	443	55510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.498461962 CEST	55510	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.498461962 CEST	55510	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.498481989 CEST	443	55510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.512929916 CEST	443	55506	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.513431072 CEST	443	55506	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.513567924 CEST	55506	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.513567924 CEST	55506	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.513623953 CEST	55506	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.513639927 CEST	443	55506	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.515593052 CEST	55511	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.515607119 CEST	443	55511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.515943050 CEST	55511	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.515943050 CEST	55511	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.515974998 CEST	443	55511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.566708088 CEST	443	55507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.567342997 CEST	55507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.567394972 CEST	443	55507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.567665100 CEST	55507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.567718983 CEST	443	55507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.697057009 CEST	443	55507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.697269917 CEST	443	55507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.697443962 CEST	55507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.697443962 CEST	55507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.697443962 CEST	55507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.700242996 CEST	55512	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.700294018 CEST	443	55512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.700521946 CEST	55512	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.700521946 CEST	55512	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.700562954 CEST	443	55512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:36.764219999 CEST	55504	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:36.764249086 CEST	443	55504	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.012897968 CEST	55507	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.012959957 CEST	443	55507	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.192193031 CEST	443	55508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.192845106 CEST	55508	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.192884922 CEST	443	55508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.193303108 CEST	55508	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.193310022 CEST	443	55508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.207793951 CEST	443	55509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.208569050 CEST	55509	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.208569050 CEST	55509	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.208606005 CEST	443	55509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.208621979 CEST	443	55509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.248397112 CEST	443	55510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.248953104 CEST	55510	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.248990059 CEST	443	55510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.249279022 CEST	55510	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.249288082 CEST	443	55510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.263102055 CEST	443	55511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.263510942 CEST	55511	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.263530970 CEST	443	55511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.264769077 CEST	55511	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.264774084 CEST	443	55511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.406847000 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:35:37.407203913 CEST	443	49735	142.250.185.206	192.168.2.4
Oct 24, 2024 01:35:37.407373905 CEST	49735	443	192.168.2.4	142.250.185.206
Oct 24, 2024 01:35:37.510976076 CEST	443	55508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.511054993 CEST	443	55508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.511120081 CEST	55508	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.511187077 CEST	443	55509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.511266947 CEST	443	55509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.511473894 CEST	55509	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.511567116 CEST	443	55510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.511574030 CEST	443	55511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.511636972 CEST	55508	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.511636972 CEST	55508	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.511670113 CEST	443	55508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.511678934 CEST	443	55508	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.511730909 CEST	443	55510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.511776924 CEST	55510	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.511811018 CEST	443	55511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.511871099 CEST	55511	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.513088942 CEST	55510	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.513117075 CEST	443	55510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.513160944 CEST	55510	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.513170958 CEST	443	55510	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.513482094 CEST	55511	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.513492107 CEST	443	55511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.513506889 CEST	55511	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.513513088 CEST	443	55511	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.514406919 CEST	55509	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.514413118 CEST	443	55509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.514425993 CEST	55509	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.514431000 CEST	443	55509	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.518050909 CEST	55513	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.518100023 CEST	443	55513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.518357992 CEST	55513	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.518393040 CEST	55514	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.518481970 CEST	443	55514	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.518563986 CEST	55514	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.518724918 CEST	55513	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.518773079 CEST	443	55513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.519174099 CEST	55515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.519218922 CEST	443	55515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.519292116 CEST	55514	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.519342899 CEST	443	55514	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.519351959 CEST	55515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.519413948 CEST	55515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.519427061 CEST	443	55515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.519504070 CEST	55516	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.519587994 CEST	443	55516	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.519817114 CEST	55516	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.519954920 CEST	55516	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.519987106 CEST	443	55516	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.644843102 CEST	443	55512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.645385981 CEST	55512	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.645426989 CEST	443	55512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.645817041 CEST	55512	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.645823956 CEST	443	55512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.775775909 CEST	443	55512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.775856972 CEST	443	55512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.775922060 CEST	55512	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.776124001 CEST	55512	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.776124001 CEST	55512	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.776149035 CEST	443	55512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.776171923 CEST	443	55512	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.779370070 CEST	55517	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.779401064 CEST	443	55517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:37.779584885 CEST	55517	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.779654026 CEST	55517	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:37.779669046 CEST	443	55517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.245012999 CEST	443	55515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.245779037 CEST	55515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.245860100 CEST	443	55515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.246370077 CEST	55515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.246423006 CEST	443	55515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.252422094 CEST	443	55513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.252774954 CEST	55513	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.252815008 CEST	443	55513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.253154993 CEST	55513	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.253165960 CEST	443	55513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.257317066 CEST	443	55516	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.257628918 CEST	55516	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.257664919 CEST	443	55516	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.258038044 CEST	55516	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.258044958 CEST	443	55516	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.267419100 CEST	443	55514	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.267870903 CEST	55514	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.267911911 CEST	443	55514	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.268212080 CEST	55514	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.268219948 CEST	443	55514	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.374026060 CEST	443	55515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.374186039 CEST	443	55515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.374413967 CEST	55515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.374979019 CEST	55515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.374979019 CEST	55515	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.375044107 CEST	443	55515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.375080109 CEST	443	55515	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.377923012 CEST	55518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.377993107 CEST	443	55518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.378081083 CEST	55518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.378266096 CEST	55518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.378293037 CEST	443	55518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.383558035 CEST	443	55513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.384681940 CEST	443	55513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.384751081 CEST	55513	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.384834051 CEST	55513	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.384852886 CEST	443	55513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.384876966 CEST	55513	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.384890079 CEST	443	55513	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.390700102 CEST	55519	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.390782118 CEST	443	55519	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.391194105 CEST	55519	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.391195059 CEST	55519	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.391354084 CEST	443	55519	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.398590088 CEST	443	55514	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.398699999 CEST	443	55514	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.398705006 CEST	443	55516	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.398753881 CEST	55514	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.399004936 CEST	55514	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.399015903 CEST	443	55516	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.399029016 CEST	443	55514	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.399054050 CEST	55514	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.399069071 CEST	443	55514	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.399076939 CEST	55516	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.399203062 CEST	55516	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.399229050 CEST	443	55516	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.399265051 CEST	55516	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.399281979 CEST	443	55516	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.403336048 CEST	55520	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.403372049 CEST	443	55520	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.403505087 CEST	55520	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.404835939 CEST	55521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.404921055 CEST	443	55521	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.405060053 CEST	55521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.405298948 CEST	55521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.405335903 CEST	443	55521	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.405447960 CEST	55520	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.405461073 CEST	443	55520	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.519951105 CEST	443	55517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.520524979 CEST	55517	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.520593882 CEST	443	55517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.521014929 CEST	55517	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.521028042 CEST	443	55517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.641999006 CEST	55522	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:35:38.642081976 CEST	443	55522	142.250.186.100	192.168.2.4
Oct 24, 2024 01:35:38.642324924 CEST	55522	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:35:38.642435074 CEST	55522	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:35:38.642467022 CEST	443	55522	142.250.186.100	192.168.2.4
Oct 24, 2024 01:35:38.650947094 CEST	443	55517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.651089907 CEST	443	55517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.651169062 CEST	55517	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.651355982 CEST	55517	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.651355982 CEST	55517	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.651398897 CEST	443	55517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.651443005 CEST	443	55517	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.655666113 CEST	55523	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.655750990 CEST	443	55523	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:38.655904055 CEST	55523	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.656060934 CEST	55523	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:38.656084061 CEST	443	55523	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.117178917 CEST	443	55518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.117795944 CEST	55518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.117820978 CEST	443	55518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.118290901 CEST	55518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.118299961 CEST	443	55518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.145867109 CEST	443	55519	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.146303892 CEST	55519	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.146384001 CEST	443	55519	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.146682024 CEST	55519	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.146697044 CEST	443	55519	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.149826050 CEST	443	55520	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.150155067 CEST	55520	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.150176048 CEST	443	55520	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.150733948 CEST	55520	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.150738001 CEST	443	55520	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.152687073 CEST	443	55521	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.153002977 CEST	55521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.153081894 CEST	443	55521	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.153435946 CEST	55521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.153490067 CEST	443	55521	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.246105909 CEST	443	55518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.246259928 CEST	443	55518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.246330976 CEST	55518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.246397972 CEST	55518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.246428013 CEST	443	55518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.246453047 CEST	55518	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.246467113 CEST	443	55518	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.249217033 CEST	55524	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.249237061 CEST	443	55524	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.249507904 CEST	55524	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.249659061 CEST	55524	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.249665976 CEST	443	55524	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.276818991 CEST	443	55519	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.276969910 CEST	443	55519	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.277045012 CEST	55519	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.277194977 CEST	55519	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.277209044 CEST	443	55519	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.277231932 CEST	55519	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.277235985 CEST	443	55519	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.279972076 CEST	55525	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.279995918 CEST	443	55525	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.280158997 CEST	55525	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.280338049 CEST	55525	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.280349016 CEST	443	55525	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.284099102 CEST	443	55521	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.284244061 CEST	443	55521	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.284432888 CEST	55521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.284432888 CEST	55521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.284432888 CEST	55521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.284801960 CEST	443	55520	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.285101891 CEST	443	55520	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.285182953 CEST	55520	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.285182953 CEST	55520	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.285202026 CEST	55520	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.285211086 CEST	443	55520	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.286989927 CEST	55526	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.287023067 CEST	443	55526	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.287091970 CEST	55526	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.287213087 CEST	55526	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.287216902 CEST	443	55526	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.287344933 CEST	55527	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.287355900 CEST	443	55527	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.287410975 CEST	55527	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.287537098 CEST	55527	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.287543058 CEST	443	55527	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.403752089 CEST	443	55523	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.406388044 CEST	55523	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.406470060 CEST	443	55523	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.407921076 CEST	55523	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.407974958 CEST	443	55523	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.521589994 CEST	443	55522	142.250.186.100	192.168.2.4
Oct 24, 2024 01:35:39.521976948 CEST	55522	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:35:39.522038937 CEST	443	55522	142.250.186.100	192.168.2.4
Oct 24, 2024 01:35:39.523507118 CEST	443	55522	142.250.186.100	192.168.2.4
Oct 24, 2024 01:35:39.523705006 CEST	55522	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:35:39.524022102 CEST	55522	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:35:39.524148941 CEST	443	55522	142.250.186.100	192.168.2.4
Oct 24, 2024 01:35:39.536201954 CEST	443	55523	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.536273956 CEST	443	55523	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.536592007 CEST	55523	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.536592007 CEST	55523	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.536592007 CEST	55523	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.539350033 CEST	55528	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.539444923 CEST	443	55528	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.539529085 CEST	55528	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.539669037 CEST	55528	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.539690018 CEST	443	55528	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.570166111 CEST	55522	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:35:39.570225954 CEST	443	55522	142.250.186.100	192.168.2.4
Oct 24, 2024 01:35:39.584954977 CEST	55521	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.585016966 CEST	443	55521	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.615848064 CEST	55522	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:35:39.844921112 CEST	55523	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.844983101 CEST	443	55523	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.989319086 CEST	443	55524	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.990036011 CEST	55524	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.990072012 CEST	443	55524	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:39.990442991 CEST	55524	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:39.990448952 CEST	443	55524	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.022408009 CEST	443	55527	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.022803068 CEST	55527	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.022838116 CEST	443	55527	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.023252010 CEST	55527	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.023257971 CEST	443	55527	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.027084112 CEST	443	55525	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.027379036 CEST	55525	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.027394056 CEST	443	55525	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.027811050 CEST	55525	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.027817011 CEST	443	55525	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.038532972 CEST	443	55526	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.038990974 CEST	55526	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.039021969 CEST	443	55526	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.039191961 CEST	55526	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.039199114 CEST	443	55526	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.120656013 CEST	443	55524	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.120867014 CEST	443	55524	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.120944977 CEST	55524	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.131901026 CEST	55524	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.131928921 CEST	443	55524	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.141762018 CEST	55529	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.141843081 CEST	443	55529	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.141937971 CEST	55529	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.142115116 CEST	55529	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.142136097 CEST	443	55529	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.150305986 CEST	443	55527	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.150474072 CEST	443	55527	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.150549889 CEST	55527	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.150715113 CEST	55527	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.150715113 CEST	55527	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.150734901 CEST	443	55527	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.150749922 CEST	443	55527	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.153558016 CEST	55530	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.153651953 CEST	443	55530	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.153783083 CEST	55530	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.153996944 CEST	55530	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.154017925 CEST	443	55530	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.158678055 CEST	443	55525	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.159742117 CEST	443	55525	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.159887075 CEST	55525	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.176687002 CEST	443	55526	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.176747084 CEST	443	55526	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.176819086 CEST	55526	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.178411007 CEST	55525	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.178411961 CEST	55525	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.178442955 CEST	443	55525	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.178461075 CEST	443	55525	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.180136919 CEST	55526	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.180157900 CEST	443	55526	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.180171013 CEST	55526	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.180176020 CEST	443	55526	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.184243917 CEST	55531	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.184278011 CEST	443	55531	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.184357882 CEST	55531	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.184930086 CEST	55531	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.184957981 CEST	443	55531	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.185837030 CEST	55532	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.185919046 CEST	443	55532	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.186211109 CEST	55532	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.186383009 CEST	55532	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.186436892 CEST	443	55532	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.287069082 CEST	443	55528	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.287566900 CEST	55528	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.287611961 CEST	443	55528	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.288306952 CEST	55528	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.288316965 CEST	443	55528	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.428075075 CEST	443	55528	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.428292990 CEST	443	55528	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.428400993 CEST	55528	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.448559999 CEST	55528	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.448590040 CEST	443	55528	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.448635101 CEST	55528	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.448649883 CEST	443	55528	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.600363016 CEST	55533	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.600446939 CEST	443	55533	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.600759029 CEST	55533	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.601784945 CEST	55533	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.601866007 CEST	443	55533	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.878673077 CEST	443	55529	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.879389048 CEST	55529	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.879467964 CEST	443	55529	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.880310059 CEST	55529	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.880362988 CEST	443	55529	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.894257069 CEST	443	55530	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.894702911 CEST	55530	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.894783974 CEST	443	55530	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.895359039 CEST	55530	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.895371914 CEST	443	55530	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.919801950 CEST	443	55532	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.920381069 CEST	55532	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.920466900 CEST	443	55532	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.921092987 CEST	55532	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.921113968 CEST	443	55532	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.926213026 CEST	443	55531	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.926737070 CEST	55531	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.926821947 CEST	443	55531	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:40.927355051 CEST	55531	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:40.927407980 CEST	443	55531	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.008501053 CEST	443	55529	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.008538008 CEST	443	55529	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.008596897 CEST	443	55529	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.008708000 CEST	55529	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.008833885 CEST	55529	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.009226084 CEST	55529	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.009264946 CEST	443	55529	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.013708115 CEST	55534	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.013770103 CEST	443	55534	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.014014959 CEST	55534	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.014266014 CEST	55534	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.014298916 CEST	443	55534	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.022737026 CEST	443	55530	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.023020029 CEST	443	55530	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.023077965 CEST	55530	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.023271084 CEST	55530	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.023272038 CEST	55530	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.023328066 CEST	443	55530	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.023353100 CEST	443	55530	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.029326916 CEST	55535	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.029411077 CEST	443	55535	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.029676914 CEST	55535	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.029676914 CEST	55535	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.029808998 CEST	443	55535	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.051496983 CEST	443	55532	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.051515102 CEST	443	55532	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.051559925 CEST	443	55532	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.051599979 CEST	55532	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.051600933 CEST	55532	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.051853895 CEST	55532	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.051853895 CEST	55532	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.051899910 CEST	443	55532	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.051928043 CEST	443	55532	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.055859089 CEST	55536	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.055941105 CEST	443	55536	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.056072950 CEST	55536	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.056273937 CEST	55536	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.056309938 CEST	443	55536	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.056615114 CEST	443	55531	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.056718111 CEST	443	55531	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.056771040 CEST	55531	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.056845903 CEST	55531	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.056864977 CEST	443	55531	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.056915045 CEST	55531	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.056927919 CEST	443	55531	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.059567928 CEST	55537	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.059593916 CEST	443	55537	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.059798002 CEST	55537	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.059986115 CEST	55537	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.059994936 CEST	443	55537	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.485732079 CEST	443	55533	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.486804962 CEST	55533	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.486836910 CEST	443	55533	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.487242937 CEST	55533	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.487247944 CEST	443	55533	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.615458965 CEST	443	55533	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.615520000 CEST	443	55533	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.615588903 CEST	55533	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.615648031 CEST	443	55533	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.615679979 CEST	443	55533	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.615710020 CEST	55533	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.615741968 CEST	55533	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.615895033 CEST	55533	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.615895033 CEST	55533	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.615926981 CEST	443	55533	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.615952969 CEST	443	55533	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.618782997 CEST	55538	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.618863106 CEST	443	55538	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.618978024 CEST	55538	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.619154930 CEST	55538	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.619187117 CEST	443	55538	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.750817060 CEST	443	55534	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.751424074 CEST	55534	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.751497030 CEST	443	55534	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.751941919 CEST	55534	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.751955032 CEST	443	55534	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.777908087 CEST	443	55535	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.778280973 CEST	55535	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.778353930 CEST	443	55535	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.779053926 CEST	55535	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.779067993 CEST	443	55535	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.792407036 CEST	443	55537	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.792721033 CEST	55537	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.792769909 CEST	443	55537	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.793061018 CEST	55537	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.793076038 CEST	443	55537	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.794631004 CEST	443	55536	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.794914961 CEST	55536	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.794990063 CEST	443	55536	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.795267105 CEST	55536	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.795280933 CEST	443	55536	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.883359909 CEST	443	55534	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.883408070 CEST	443	55534	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.883474112 CEST	55534	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.883521080 CEST	443	55534	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.883553982 CEST	443	55534	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.883610010 CEST	55534	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.883759975 CEST	55534	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.883759975 CEST	55534	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.883790016 CEST	443	55534	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.883812904 CEST	443	55534	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.889368057 CEST	55539	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.889431953 CEST	443	55539	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.889523029 CEST	55539	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.889940977 CEST	55539	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.889971018 CEST	443	55539	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.908912897 CEST	443	55535	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.909202099 CEST	443	55535	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.909271002 CEST	55535	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.909320116 CEST	55535	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.909320116 CEST	55535	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.909369946 CEST	443	55535	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.909393072 CEST	443	55535	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.913724899 CEST	55540	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.913783073 CEST	443	55540	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.913855076 CEST	55540	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.914283037 CEST	55540	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.914309978 CEST	443	55540	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.923294067 CEST	443	55537	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.923463106 CEST	443	55537	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.923532963 CEST	55537	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.926537991 CEST	443	55536	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.926584005 CEST	443	55536	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.926634073 CEST	55536	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.927038908 CEST	55536	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.927054882 CEST	443	55536	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.927078009 CEST	55537	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.927086115 CEST	55536	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.927099943 CEST	443	55536	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.927103996 CEST	443	55537	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.927128077 CEST	55537	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.927143097 CEST	443	55537	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.934432030 CEST	55541	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.934473038 CEST	443	55541	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.934592962 CEST	55541	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.936134100 CEST	55542	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.936157942 CEST	443	55542	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.936222076 CEST	55542	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.937110901 CEST	55541	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.937139988 CEST	443	55541	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:41.937470913 CEST	55542	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:41.937494993 CEST	443	55542	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.366456032 CEST	443	55538	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.382843971 CEST	55538	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.382880926 CEST	443	55538	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.383652925 CEST	55538	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.383660078 CEST	443	55538	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.513381958 CEST	443	55538	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.513542891 CEST	443	55538	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.513642073 CEST	55538	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.521744013 CEST	55538	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.521794081 CEST	443	55538	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.521826029 CEST	55538	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.521842957 CEST	443	55538	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.553183079 CEST	55543	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.553266048 CEST	443	55543	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.553378105 CEST	55543	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.557475090 CEST	55543	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.557512999 CEST	443	55543	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.630037069 CEST	443	55539	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.660366058 CEST	443	55540	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.671649933 CEST	55539	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.681351900 CEST	443	55542	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.688806057 CEST	443	55541	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.703927994 CEST	55540	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.731928110 CEST	55542	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.731971979 CEST	55541	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.741869926 CEST	55541	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.741903067 CEST	443	55541	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.742573023 CEST	55541	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.742583990 CEST	443	55541	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.742870092 CEST	55539	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.742909908 CEST	443	55539	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.743346930 CEST	55539	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.743360043 CEST	443	55539	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.765480995 CEST	55540	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.765533924 CEST	443	55540	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.765846968 CEST	55540	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.765861988 CEST	443	55540	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.767937899 CEST	55542	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.767991066 CEST	443	55542	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.768671989 CEST	55542	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.768690109 CEST	443	55542	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.869709969 CEST	443	55539	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.869885921 CEST	443	55539	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.870065928 CEST	55539	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.870459080 CEST	443	55541	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.870688915 CEST	443	55541	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.870775938 CEST	55541	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.892826080 CEST	443	55540	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.892992973 CEST	443	55540	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.893204927 CEST	55540	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:42.895796061 CEST	443	55542	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.895881891 CEST	443	55542	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:42.896814108 CEST	55542	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.037590027 CEST	55539	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.037590027 CEST	55539	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.037662029 CEST	443	55539	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.037693977 CEST	443	55539	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.038978100 CEST	55542	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.039047956 CEST	443	55542	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.039083958 CEST	55542	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.039102077 CEST	443	55542	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.039326906 CEST	55541	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.039355040 CEST	443	55541	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.039386988 CEST	55541	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.039395094 CEST	443	55541	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.050491095 CEST	55540	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.050510883 CEST	443	55540	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.050534010 CEST	55540	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.050544977 CEST	443	55540	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.053107977 CEST	55545	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.053142071 CEST	443	55545	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.053147078 CEST	55544	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.053195000 CEST	55545	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.053231001 CEST	443	55544	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.053316116 CEST	55544	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.054399014 CEST	55546	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.054419994 CEST	443	55546	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.054929018 CEST	55546	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.055273056 CEST	55545	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.055289030 CEST	443	55545	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.055417061 CEST	55544	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.055450916 CEST	443	55544	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.056086063 CEST	55547	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.056097031 CEST	443	55547	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.056240082 CEST	55547	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.056389093 CEST	55547	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.056401014 CEST	443	55547	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.056775093 CEST	55546	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.056802034 CEST	443	55546	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.293874979 CEST	443	55543	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.294435978 CEST	55543	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.294518948 CEST	443	55543	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.294924974 CEST	55543	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.294938087 CEST	443	55543	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.428407907 CEST	443	55543	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.428570032 CEST	443	55543	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.428648949 CEST	55543	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.428801060 CEST	55543	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.428844929 CEST	443	55543	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.428881884 CEST	55543	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.428898096 CEST	443	55543	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.432401896 CEST	55548	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.432435989 CEST	443	55548	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.432559967 CEST	55548	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.432744026 CEST	55548	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.432751894 CEST	443	55548	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.790904999 CEST	443	55546	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.791786909 CEST	55546	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.791862011 CEST	443	55546	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.793225050 CEST	55546	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.793239117 CEST	443	55546	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.796232939 CEST	443	55544	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.796281099 CEST	443	55545	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.796813965 CEST	55544	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.796844959 CEST	443	55544	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.797219992 CEST	55544	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.797231913 CEST	443	55544	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.797657013 CEST	55545	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.797672987 CEST	443	55545	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.798686028 CEST	55545	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.798693895 CEST	443	55545	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.799582005 CEST	443	55547	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.800400019 CEST	55547	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.800412893 CEST	443	55547	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.801235914 CEST	55547	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.801240921 CEST	443	55547	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.919255972 CEST	443	55546	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.919433117 CEST	443	55546	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.919511080 CEST	55546	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.919902086 CEST	55546	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.919939995 CEST	443	55546	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.924398899 CEST	443	55545	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.924468994 CEST	443	55545	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.924525023 CEST	55545	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.924539089 CEST	443	55545	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.924573898 CEST	443	55545	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.924628973 CEST	55545	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.925636053 CEST	55549	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.925671101 CEST	443	55549	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.925883055 CEST	55549	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.925976038 CEST	55545	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.925976038 CEST	55545	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.925993919 CEST	443	55545	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.926002026 CEST	443	55545	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.926840067 CEST	443	55544	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.926898956 CEST	443	55544	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.927031994 CEST	55544	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.928595066 CEST	55550	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.928627014 CEST	443	55550	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.928724051 CEST	55550	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.928950071 CEST	55550	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.928966045 CEST	443	55550	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.929219961 CEST	55544	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.929234982 CEST	443	55544	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.930329084 CEST	443	55547	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.930397987 CEST	443	55547	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.930500031 CEST	443	55547	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.930600882 CEST	55547	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.930851936 CEST	55549	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.930872917 CEST	443	55549	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.931360960 CEST	55547	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.931368113 CEST	443	55547	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.931438923 CEST	55547	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.931447983 CEST	443	55547	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.937359095 CEST	55551	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.937370062 CEST	443	55551	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.937520027 CEST	55551	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.937887907 CEST	55551	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.937900066 CEST	443	55551	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.940845013 CEST	55552	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.940927982 CEST	443	55552	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:43.941005945 CEST	55552	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.941143990 CEST	55552	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:43.941171885 CEST	443	55552	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.172106028 CEST	443	55548	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.172852039 CEST	55548	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.172888994 CEST	443	55548	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.203305006 CEST	55548	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.203363895 CEST	443	55548	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.331588984 CEST	443	55548	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.331744909 CEST	443	55548	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.331814051 CEST	55548	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.332319021 CEST	55548	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.332336903 CEST	443	55548	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.336466074 CEST	55553	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.336560965 CEST	443	55553	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.336720943 CEST	55553	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.336935997 CEST	55553	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.336990118 CEST	443	55553	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.655405998 CEST	443	55550	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.655917883 CEST	55550	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.655947924 CEST	443	55550	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.656383991 CEST	55550	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.656389952 CEST	443	55550	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.692358971 CEST	443	55551	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.692675114 CEST	55551	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.692697048 CEST	443	55551	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.693048954 CEST	55551	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.693053961 CEST	443	55551	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.693229914 CEST	443	55552	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.693470001 CEST	55552	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.693491936 CEST	443	55552	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.693840981 CEST	55552	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.693847895 CEST	443	55552	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.694775105 CEST	443	55549	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.695038080 CEST	55549	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.695051908 CEST	443	55549	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.695348978 CEST	55549	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.695353031 CEST	443	55549	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.788177013 CEST	443	55550	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.788235903 CEST	443	55550	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.788346052 CEST	55550	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.788511992 CEST	55550	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.788526058 CEST	443	55550	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.788536072 CEST	55550	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.788541079 CEST	443	55550	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.796050072 CEST	55554	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.796089888 CEST	443	55554	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.796153069 CEST	55554	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.797915936 CEST	55554	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.797934055 CEST	443	55554	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.825015068 CEST	443	55552	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.825206041 CEST	443	55552	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.825305939 CEST	55552	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.825433016 CEST	55552	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.825433016 CEST	55552	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.825457096 CEST	443	55552	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.825463057 CEST	443	55552	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.826531887 CEST	443	55551	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.826601028 CEST	443	55551	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.826702118 CEST	443	55551	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.826751947 CEST	55551	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.827116013 CEST	443	55549	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.827311039 CEST	443	55549	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.827388048 CEST	55549	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.829345942 CEST	55551	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.829358101 CEST	443	55551	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.829478025 CEST	55551	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.829483986 CEST	443	55551	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.830382109 CEST	55549	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.830388069 CEST	443	55549	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.830394983 CEST	55549	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.830398083 CEST	443	55549	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.834094048 CEST	55555	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.834182024 CEST	443	55555	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.834259033 CEST	55555	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.835027933 CEST	55556	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.835110903 CEST	443	55556	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.835186958 CEST	55556	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.836637020 CEST	55557	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.836719990 CEST	443	55557	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.836774111 CEST	55555	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.836806059 CEST	55557	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.836811066 CEST	443	55555	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.837011099 CEST	55557	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.837045908 CEST	443	55557	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:44.837085962 CEST	55556	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:44.837124109 CEST	443	55556	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.071693897 CEST	443	55553	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.072398901 CEST	55553	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.072489977 CEST	443	55553	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.072841883 CEST	55553	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.072859049 CEST	443	55553	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.221167088 CEST	443	55553	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.221321106 CEST	443	55553	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.221402884 CEST	55553	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.221612930 CEST	55553	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.221638918 CEST	443	55553	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.221662998 CEST	55553	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.221676111 CEST	443	55553	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.224492073 CEST	55558	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.224575043 CEST	443	55558	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.224661112 CEST	55558	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.224837065 CEST	55558	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.224864960 CEST	443	55558	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.518155098 CEST	443	55554	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.518767118 CEST	55554	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.518853903 CEST	443	55554	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.519259930 CEST	55554	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.519274950 CEST	443	55554	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.572318077 CEST	443	55556	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.573007107 CEST	55556	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.573082924 CEST	443	55556	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.573386908 CEST	55556	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.573402882 CEST	443	55556	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.580260038 CEST	443	55555	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.580728054 CEST	55555	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.580780029 CEST	443	55555	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.581496954 CEST	55555	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.581510067 CEST	443	55555	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.583425999 CEST	443	55557	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.583758116 CEST	55557	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.583836079 CEST	443	55557	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.584105015 CEST	55557	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.584117889 CEST	443	55557	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.646519899 CEST	443	55554	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.646598101 CEST	443	55554	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.646747112 CEST	55554	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.646857023 CEST	55554	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.646877050 CEST	443	55554	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.646899939 CEST	55554	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.646908045 CEST	443	55554	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.650166988 CEST	55559	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.650248051 CEST	443	55559	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.650332928 CEST	55559	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.650484085 CEST	55559	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.650506020 CEST	443	55559	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.701831102 CEST	443	55556	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.702538967 CEST	443	55556	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.702671051 CEST	55556	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.702748060 CEST	55556	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.702748060 CEST	55556	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.702792883 CEST	443	55556	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.702824116 CEST	443	55556	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.705308914 CEST	55560	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.705393076 CEST	443	55560	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.705497980 CEST	55560	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.705655098 CEST	55560	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.705677986 CEST	443	55560	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.710072041 CEST	443	55555	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.710166931 CEST	443	55555	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.710266113 CEST	443	55555	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.710269928 CEST	55555	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.710334063 CEST	55555	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.710393906 CEST	55555	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.710423946 CEST	443	55555	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.710448980 CEST	55555	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.710463047 CEST	443	55555	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.712475061 CEST	55561	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.712510109 CEST	443	55561	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.712665081 CEST	55561	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.712913036 CEST	55561	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.712929010 CEST	443	55561	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.715399981 CEST	443	55557	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.715467930 CEST	443	55557	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.715569973 CEST	443	55557	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.715630054 CEST	55557	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.715667009 CEST	55557	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.715733051 CEST	55557	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.715733051 CEST	55557	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.715759039 CEST	443	55557	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.715785027 CEST	443	55557	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.717677116 CEST	55562	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.717700005 CEST	443	55562	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.717770100 CEST	55562	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.717880964 CEST	55562	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.717901945 CEST	443	55562	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.972496033 CEST	443	55558	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.973181963 CEST	55558	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.973254919 CEST	443	55558	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:45.973697901 CEST	55558	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:45.973711967 CEST	443	55558	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.104185104 CEST	443	55558	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.104324102 CEST	443	55558	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.104403973 CEST	55558	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.104576111 CEST	55558	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.104576111 CEST	55558	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.104619026 CEST	443	55558	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.104645014 CEST	443	55558	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.107811928 CEST	55563	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.107847929 CEST	443	55563	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.108092070 CEST	55563	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.108268023 CEST	55563	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.108287096 CEST	443	55563	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.396420002 CEST	443	55559	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.396981001 CEST	55559	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.397037029 CEST	443	55559	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.397464991 CEST	55559	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.397478104 CEST	443	55559	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.440413952 CEST	443	55561	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.440830946 CEST	55561	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.440850019 CEST	443	55561	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.441251040 CEST	55561	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.441257000 CEST	443	55561	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.441885948 CEST	443	55560	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.442207098 CEST	55560	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.442226887 CEST	443	55560	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.442549944 CEST	55560	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.442554951 CEST	443	55560	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.452837944 CEST	443	55562	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.453166008 CEST	55562	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.453178883 CEST	443	55562	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.453543901 CEST	55562	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.453548908 CEST	443	55562	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.528991938 CEST	443	55559	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.529062033 CEST	443	55559	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.529356003 CEST	55559	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.529356956 CEST	55559	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.529437065 CEST	55559	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.529473066 CEST	443	55559	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.532265902 CEST	55564	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.532282114 CEST	443	55564	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.532390118 CEST	55564	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.532524109 CEST	55564	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.532527924 CEST	443	55564	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.569238901 CEST	443	55561	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.569309950 CEST	443	55561	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.569406033 CEST	443	55561	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.569454908 CEST	55561	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.569454908 CEST	55561	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.569627047 CEST	55561	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.569627047 CEST	55561	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.569650888 CEST	443	55561	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.569664001 CEST	443	55561	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.570996046 CEST	443	55560	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.571151972 CEST	443	55560	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.571212053 CEST	55560	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.571302891 CEST	55560	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.571325064 CEST	443	55560	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.571351051 CEST	55560	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.571357965 CEST	443	55560	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.572891951 CEST	55565	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.572948933 CEST	443	55565	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.573005915 CEST	55565	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.573170900 CEST	55565	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.573179007 CEST	443	55565	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.573782921 CEST	55566	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.573791981 CEST	443	55566	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.573954105 CEST	55566	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.574090004 CEST	55566	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.574099064 CEST	443	55566	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.584278107 CEST	443	55562	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.584440947 CEST	443	55562	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.584520102 CEST	55562	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.584656954 CEST	55562	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.584662914 CEST	443	55562	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.584676027 CEST	55562	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.584681034 CEST	443	55562	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.587255955 CEST	55567	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.587270021 CEST	443	55567	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.587327003 CEST	55567	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.587451935 CEST	55567	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.587470055 CEST	443	55567	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.848592997 CEST	443	55563	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.849065065 CEST	55563	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.849085093 CEST	443	55563	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.849586964 CEST	55563	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.849596977 CEST	443	55563	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.980541945 CEST	443	55563	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.980650902 CEST	443	55563	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.980719090 CEST	55563	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.981070995 CEST	55563	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.981071949 CEST	55563	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.981102943 CEST	443	55563	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.981116056 CEST	443	55563	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.984673977 CEST	55568	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.984707117 CEST	443	55568	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:46.984956026 CEST	55568	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.984956026 CEST	55568	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:46.984992981 CEST	443	55568	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.264341116 CEST	443	55564	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.264935017 CEST	55564	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.264964104 CEST	443	55564	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.265438080 CEST	55564	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.265449047 CEST	443	55564	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.321640015 CEST	443	55565	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.322062016 CEST	55565	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.322086096 CEST	443	55565	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.322186947 CEST	443	55566	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.322493076 CEST	55565	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.322499990 CEST	443	55565	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.322832108 CEST	55566	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.322855949 CEST	443	55566	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.323316097 CEST	55566	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.323321104 CEST	443	55566	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.327907085 CEST	443	55567	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.328237057 CEST	55567	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.328257084 CEST	443	55567	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.328583956 CEST	55567	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.328588963 CEST	443	55567	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.395422935 CEST	443	55564	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.395486116 CEST	443	55564	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.395672083 CEST	55564	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.395695925 CEST	55564	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.395708084 CEST	443	55564	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.395719051 CEST	55564	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.395723104 CEST	443	55564	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.398403883 CEST	55569	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.398487091 CEST	443	55569	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.398566961 CEST	55569	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.398682117 CEST	55569	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.398700953 CEST	443	55569	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.453330040 CEST	443	55565	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.453402996 CEST	443	55565	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.453505039 CEST	443	55565	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.453550100 CEST	55565	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.453584909 CEST	55565	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.453635931 CEST	55565	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.453653097 CEST	443	55565	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.453665018 CEST	55565	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.453671932 CEST	443	55565	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.455446959 CEST	443	55566	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.455801010 CEST	443	55566	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.455902100 CEST	55566	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.455919027 CEST	55566	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.455923080 CEST	443	55566	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.455936909 CEST	55566	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.455940962 CEST	443	55566	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.455965042 CEST	55570	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.456001997 CEST	443	55570	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.456103086 CEST	55570	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.456182957 CEST	55570	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.456190109 CEST	443	55570	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.457556009 CEST	443	55567	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.457700014 CEST	443	55567	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.457746983 CEST	55567	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.457786083 CEST	55571	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.457803965 CEST	55567	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.457812071 CEST	443	55567	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.457822084 CEST	55567	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.457827091 CEST	443	55567	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.457870007 CEST	443	55571	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.457974911 CEST	55571	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.458106041 CEST	55571	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.458136082 CEST	443	55571	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.459589958 CEST	55572	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.459609032 CEST	443	55572	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.459652901 CEST	55572	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.459752083 CEST	55572	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.459764004 CEST	443	55572	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.730818987 CEST	443	55568	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.731461048 CEST	55568	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.731486082 CEST	443	55568	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.731942892 CEST	55568	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.731947899 CEST	443	55568	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.861505985 CEST	443	55568	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.861643076 CEST	443	55568	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.861772060 CEST	55568	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.861814022 CEST	55568	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.861814022 CEST	55568	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.861831903 CEST	443	55568	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.861841917 CEST	443	55568	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.864675999 CEST	55573	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.864702940 CEST	443	55573	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:47.864767075 CEST	55573	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.864901066 CEST	55573	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:47.864912987 CEST	443	55573	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.143874884 CEST	443	55569	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.156290054 CEST	55569	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.156335115 CEST	443	55569	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.157140017 CEST	55569	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.157147884 CEST	443	55569	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.184067965 CEST	443	55570	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.184639931 CEST	55570	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.184669018 CEST	443	55570	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.185583115 CEST	55570	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.185590029 CEST	443	55570	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.193623066 CEST	443	55572	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.194189072 CEST	55572	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.194209099 CEST	443	55572	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.195204020 CEST	55572	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.195209026 CEST	443	55572	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.207467079 CEST	443	55571	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.208635092 CEST	55571	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.208709955 CEST	443	55571	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.209166050 CEST	55571	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.209181070 CEST	443	55571	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.285645962 CEST	443	55569	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.285685062 CEST	443	55569	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.285747051 CEST	443	55569	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.285804033 CEST	55569	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.286408901 CEST	55569	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.286429882 CEST	443	55569	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.286443949 CEST	55569	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.286452055 CEST	443	55569	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.302021027 CEST	55574	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.302056074 CEST	443	55574	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.302118063 CEST	55574	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.303395033 CEST	55574	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.303406000 CEST	443	55574	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.311522961 CEST	443	55570	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.311680079 CEST	443	55570	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.311785936 CEST	55570	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.312051058 CEST	55570	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.312066078 CEST	443	55570	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.312108040 CEST	55570	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.312114000 CEST	443	55570	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.319894075 CEST	55575	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.319917917 CEST	443	55575	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.319978952 CEST	55575	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.321547031 CEST	55575	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.321558952 CEST	443	55575	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.323580027 CEST	443	55572	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.323724985 CEST	443	55572	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.324176073 CEST	55572	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.324390888 CEST	55572	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.324398994 CEST	443	55572	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.324408054 CEST	55572	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.324412107 CEST	443	55572	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.330895901 CEST	55576	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.330982924 CEST	443	55576	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.331062078 CEST	55576	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.331876040 CEST	55576	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.331911087 CEST	443	55576	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.338588953 CEST	443	55571	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.338733912 CEST	443	55571	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.339080095 CEST	55571	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.339685917 CEST	55571	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.339725018 CEST	443	55571	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.350857973 CEST	55577	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.350899935 CEST	443	55577	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.350969076 CEST	55577	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.351064920 CEST	55577	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.351077080 CEST	443	55577	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.612736940 CEST	443	55573	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.613615990 CEST	55573	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.613637924 CEST	443	55573	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.614629030 CEST	55573	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.614634037 CEST	443	55573	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.747344971 CEST	443	55573	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.747406006 CEST	443	55573	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.747503042 CEST	443	55573	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.747561932 CEST	55573	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.747704983 CEST	55573	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.747713089 CEST	443	55573	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.747762918 CEST	55573	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.747767925 CEST	443	55573	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.751676083 CEST	55578	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.751712084 CEST	443	55578	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:48.751924038 CEST	55578	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.752135992 CEST	55578	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:48.752163887 CEST	443	55578	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.031825066 CEST	443	55574	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.032356024 CEST	55574	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.032378912 CEST	443	55574	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.032841921 CEST	55574	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.032847881 CEST	443	55574	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.057924986 CEST	443	55575	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.058455944 CEST	55575	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.058479071 CEST	443	55575	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.058890104 CEST	55575	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.058895111 CEST	443	55575	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.063061953 CEST	443	55576	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.063571930 CEST	55576	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.063622952 CEST	443	55576	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.064059019 CEST	55576	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.064070940 CEST	443	55576	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.090461016 CEST	443	55577	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.091299057 CEST	55577	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.091373920 CEST	443	55577	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.091713905 CEST	55577	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.091728926 CEST	443	55577	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.160974979 CEST	443	55574	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.161051035 CEST	443	55574	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.161216974 CEST	55574	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.161348104 CEST	55574	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.161366940 CEST	443	55574	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.161375999 CEST	55574	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.161381960 CEST	443	55574	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.164449930 CEST	55579	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.164493084 CEST	443	55579	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.164573908 CEST	55579	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.164747000 CEST	55579	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.164753914 CEST	443	55579	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.189016104 CEST	443	55575	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.189085007 CEST	443	55575	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.189193964 CEST	443	55575	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.189264059 CEST	55575	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.189265013 CEST	55575	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.189306021 CEST	55575	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.189317942 CEST	443	55575	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.189327955 CEST	55575	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.189332008 CEST	443	55575	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.190618992 CEST	443	55576	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.190777063 CEST	443	55576	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.190850019 CEST	55576	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.193043947 CEST	55576	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.193070889 CEST	443	55576	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.193097115 CEST	55576	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.193113089 CEST	443	55576	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.194273949 CEST	55580	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.194314003 CEST	443	55580	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.194384098 CEST	55580	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.194510937 CEST	55580	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.194533110 CEST	443	55580	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.195472002 CEST	55581	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.195554018 CEST	443	55581	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.195643902 CEST	55581	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.195792913 CEST	55581	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.195815086 CEST	443	55581	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.220732927 CEST	443	55577	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.220817089 CEST	443	55577	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.220927954 CEST	443	55577	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.220954895 CEST	55577	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.220988989 CEST	55577	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.221019983 CEST	55577	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.221034050 CEST	443	55577	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.221046925 CEST	55577	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.221050978 CEST	443	55577	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.222903013 CEST	55582	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.222915888 CEST	443	55582	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.223189116 CEST	55582	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.223310947 CEST	55582	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.223323107 CEST	443	55582	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.499631882 CEST	443	55578	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.524971962 CEST	55578	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.525010109 CEST	443	55578	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.525746107 CEST	55578	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.525758028 CEST	443	55578	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.545917988 CEST	443	55522	142.250.186.100	192.168.2.4
Oct 24, 2024 01:35:49.545975924 CEST	443	55522	142.250.186.100	192.168.2.4
Oct 24, 2024 01:35:49.546036959 CEST	55522	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:35:49.653033972 CEST	443	55578	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.653105974 CEST	443	55578	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.653317928 CEST	55578	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.653810024 CEST	55578	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.653817892 CEST	443	55578	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.653860092 CEST	55578	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.653867006 CEST	443	55578	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.659455061 CEST	55583	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.659504890 CEST	443	55583	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.659739971 CEST	55583	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.660527945 CEST	55583	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.660561085 CEST	443	55583	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.893652916 CEST	443	55579	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.894438982 CEST	55579	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.894483089 CEST	443	55579	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.895030975 CEST	55579	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.895044088 CEST	443	55579	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.933604002 CEST	443	55581	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.934576035 CEST	55581	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.934650898 CEST	443	55581	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.935293913 CEST	55581	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.935308933 CEST	443	55581	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.942285061 CEST	443	55580	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.942719936 CEST	55580	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.942749023 CEST	443	55580	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.943340063 CEST	55580	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.943347931 CEST	443	55580	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.951930046 CEST	443	55582	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.952435970 CEST	55582	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.952450037 CEST	443	55582	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:49.953041077 CEST	55582	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:49.953047991 CEST	443	55582	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.023597956 CEST	443	55579	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.023622990 CEST	443	55579	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.023660898 CEST	443	55579	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.023766994 CEST	55579	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.023766994 CEST	55579	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.024147987 CEST	55579	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.024161100 CEST	443	55579	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.024187088 CEST	55579	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.024192095 CEST	443	55579	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.028208017 CEST	55584	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.028248072 CEST	443	55584	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.028350115 CEST	55584	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.028800011 CEST	55584	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.028815031 CEST	443	55584	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.062747002 CEST	443	55581	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.062868118 CEST	443	55581	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.062918901 CEST	55581	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.062946081 CEST	443	55581	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.062982082 CEST	443	55581	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.063095093 CEST	55581	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.063138008 CEST	55581	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.063169956 CEST	443	55581	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.063195944 CEST	55581	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.063210964 CEST	443	55581	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.065836906 CEST	55585	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.065922976 CEST	443	55585	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.066006899 CEST	55585	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.066364050 CEST	55585	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.066399097 CEST	443	55585	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.074826002 CEST	443	55580	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.074984074 CEST	443	55580	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.075038910 CEST	55580	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.075258970 CEST	55580	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.075272083 CEST	443	55580	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.075298071 CEST	55580	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.075304031 CEST	443	55580	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.079013109 CEST	443	55582	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.079057932 CEST	55586	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.079075098 CEST	443	55586	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.079159975 CEST	443	55582	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.079191923 CEST	55586	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.079207897 CEST	55582	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.079355001 CEST	55582	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.079361916 CEST	443	55582	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.079372883 CEST	55582	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.079377890 CEST	443	55582	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.080539942 CEST	55586	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.080554962 CEST	443	55586	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.082115889 CEST	55587	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.082200050 CEST	443	55587	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.082278013 CEST	55587	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.082401991 CEST	55587	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.082437992 CEST	443	55587	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.407757044 CEST	443	55583	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.408241987 CEST	55583	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.408289909 CEST	443	55583	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.408670902 CEST	55583	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.408684015 CEST	443	55583	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.538379908 CEST	443	55583	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.538445950 CEST	443	55583	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.538512945 CEST	55583	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.538788080 CEST	55583	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.538816929 CEST	443	55583	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.538850069 CEST	55583	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.538862944 CEST	443	55583	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.541742086 CEST	55588	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.541769981 CEST	443	55588	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.541831017 CEST	55588	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.541997910 CEST	55588	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.542010069 CEST	443	55588	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.766376019 CEST	443	55584	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.767209053 CEST	55584	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.767225027 CEST	443	55584	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.767906904 CEST	55584	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.767914057 CEST	443	55584	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.803471088 CEST	443	55585	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.804265022 CEST	55585	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.804351091 CEST	443	55585	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.805053949 CEST	55585	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.805071115 CEST	443	55585	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.817770004 CEST	443	55586	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.818237066 CEST	55586	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.818258047 CEST	443	55586	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.819298983 CEST	55586	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.819307089 CEST	443	55586	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.851545095 CEST	443	55587	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.852360964 CEST	55587	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.852447033 CEST	443	55587	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.853271008 CEST	55587	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.853286028 CEST	443	55587	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.898214102 CEST	443	55584	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.898369074 CEST	443	55584	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.898479939 CEST	55584	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.898915052 CEST	55584	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.898915052 CEST	55584	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.898937941 CEST	443	55584	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.898952007 CEST	443	55584	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.903974056 CEST	55589	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.903991938 CEST	443	55589	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.904114962 CEST	55589	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.904483080 CEST	55589	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.904495001 CEST	443	55589	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.934809923 CEST	443	55585	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.934843063 CEST	443	55585	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.934887886 CEST	443	55585	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.934927940 CEST	55585	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.934988976 CEST	55585	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.935344934 CEST	55585	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.935390949 CEST	443	55585	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.935422897 CEST	55585	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.935440063 CEST	443	55585	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.940969944 CEST	55590	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.940995932 CEST	443	55590	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.941063881 CEST	55590	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.941329002 CEST	55590	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.941340923 CEST	443	55590	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.947653055 CEST	443	55586	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.947798014 CEST	443	55586	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.947942972 CEST	55586	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.948153973 CEST	55586	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.948170900 CEST	443	55586	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.948189020 CEST	55586	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.948195934 CEST	443	55586	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.951617002 CEST	55591	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.951627970 CEST	443	55591	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.951709986 CEST	55591	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.952090025 CEST	55591	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.952100039 CEST	443	55591	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.983469963 CEST	443	55587	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.983541012 CEST	443	55587	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.983633041 CEST	443	55587	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.983773947 CEST	55587	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.983773947 CEST	55587	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.983773947 CEST	55587	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.983774900 CEST	55587	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.986340046 CEST	55592	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.986428976 CEST	443	55592	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:50.986507893 CEST	55592	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.986641884 CEST	55592	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:50.986665964 CEST	443	55592	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.291505098 CEST	443	55588	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.292912006 CEST	55587	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.292973995 CEST	443	55587	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.294245958 CEST	55588	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.294269085 CEST	443	55588	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.295255899 CEST	55588	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.295264959 CEST	443	55588	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.403606892 CEST	55522	443	192.168.2.4	142.250.186.100
Oct 24, 2024 01:35:51.403671980 CEST	443	55522	142.250.186.100	192.168.2.4
Oct 24, 2024 01:35:51.435792923 CEST	443	55588	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.435939074 CEST	443	55588	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.435992956 CEST	55588	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.436505079 CEST	55588	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.436518908 CEST	443	55588	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.436532974 CEST	55588	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.436537981 CEST	443	55588	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.440594912 CEST	55593	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.440676928 CEST	443	55593	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.440763950 CEST	55593	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.440926075 CEST	55593	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.440959930 CEST	443	55593	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.655800104 CEST	443	55589	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.656291962 CEST	55589	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.656312943 CEST	443	55589	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.656907082 CEST	55589	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.656912088 CEST	443	55589	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.692327023 CEST	443	55590	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.692806005 CEST	55590	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.692826986 CEST	443	55590	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.693248034 CEST	55590	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.693253994 CEST	443	55590	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.702456951 CEST	443	55591	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.702848911 CEST	55591	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.702866077 CEST	443	55591	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.703233957 CEST	55591	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.703238010 CEST	443	55591	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.729159117 CEST	443	55592	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.729522943 CEST	55592	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.729568005 CEST	443	55592	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.729898930 CEST	55592	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.729913950 CEST	443	55592	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.790085077 CEST	443	55589	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.790270090 CEST	443	55589	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.790333033 CEST	55589	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.790462017 CEST	55589	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.790476084 CEST	443	55589	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.790484905 CEST	55589	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.790489912 CEST	443	55589	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.793550968 CEST	55594	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.793595076 CEST	443	55594	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.793679953 CEST	55594	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.793876886 CEST	55594	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.793905973 CEST	443	55594	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.826152086 CEST	443	55590	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.826231956 CEST	443	55590	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.826283932 CEST	55590	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.826427937 CEST	55590	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.826443911 CEST	443	55590	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.826466084 CEST	55590	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.826471090 CEST	443	55590	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.828782082 CEST	55595	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.828869104 CEST	443	55595	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.828979015 CEST	55595	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.829138041 CEST	55595	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.829174042 CEST	443	55595	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.836859941 CEST	443	55591	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.836926937 CEST	443	55591	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.837028980 CEST	443	55591	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.837048054 CEST	55591	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.837085009 CEST	55591	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.837116003 CEST	55591	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.837121964 CEST	443	55591	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.837131977 CEST	55591	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.837136030 CEST	443	55591	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.839068890 CEST	55596	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.839104891 CEST	443	55596	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.839170933 CEST	55596	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.839303017 CEST	55596	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.839323997 CEST	443	55596	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.860832930 CEST	443	55592	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.860980988 CEST	443	55592	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.861071110 CEST	55592	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.861126900 CEST	55592	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.861126900 CEST	55592	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.861152887 CEST	443	55592	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.861191034 CEST	443	55592	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.863147974 CEST	55597	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.863221884 CEST	443	55597	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:51.863307953 CEST	55597	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.863406897 CEST	55597	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:51.863440037 CEST	443	55597	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.193022013 CEST	443	55593	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.193679094 CEST	55593	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.193722963 CEST	443	55593	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.194128036 CEST	55593	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.194139957 CEST	443	55593	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.324812889 CEST	443	55593	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.324892998 CEST	443	55593	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.324966908 CEST	55593	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.324989080 CEST	443	55593	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.325018883 CEST	443	55593	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.325113058 CEST	55593	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.325234890 CEST	55593	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.325234890 CEST	55593	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.325259924 CEST	443	55593	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.325282097 CEST	443	55593	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.328216076 CEST	55598	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.328246117 CEST	443	55598	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.328403950 CEST	55598	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.328589916 CEST	55598	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.328603983 CEST	443	55598	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.519108057 CEST	443	55594	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.519607067 CEST	55594	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.519632101 CEST	443	55594	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.520103931 CEST	55594	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.520111084 CEST	443	55594	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.554714918 CEST	443	55595	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.555049896 CEST	55595	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.555124044 CEST	443	55595	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.555392027 CEST	55595	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.555407047 CEST	443	55595	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.601022959 CEST	443	55596	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.601363897 CEST	55596	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.601402998 CEST	443	55596	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.601716995 CEST	55596	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.601723909 CEST	443	55596	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.608427048 CEST	443	55597	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.608805895 CEST	55597	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.608881950 CEST	443	55597	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.609127045 CEST	55597	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.609141111 CEST	443	55597	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.650022030 CEST	443	55594	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.650090933 CEST	443	55594	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.650260925 CEST	55594	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.650330067 CEST	55594	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.650330067 CEST	55594	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.650368929 CEST	443	55594	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.650391102 CEST	443	55594	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.653487921 CEST	55599	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.653573990 CEST	443	55599	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.653677940 CEST	55599	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.653814077 CEST	55599	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.653853893 CEST	443	55599	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.682713032 CEST	443	55595	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.682787895 CEST	443	55595	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.682888985 CEST	55595	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.682964087 CEST	55595	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.683007002 CEST	443	55595	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.683034897 CEST	55595	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.683052063 CEST	443	55595	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.685296059 CEST	55600	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.685352087 CEST	443	55600	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.685442924 CEST	55600	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.685585976 CEST	55600	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.685619116 CEST	443	55600	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.735867977 CEST	443	55596	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.736025095 CEST	443	55596	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.736082077 CEST	55596	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.736119032 CEST	55596	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.736119032 CEST	55596	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.736145020 CEST	443	55596	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.736156940 CEST	443	55596	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.738076925 CEST	55601	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.738106012 CEST	443	55601	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.738348961 CEST	55601	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.738506079 CEST	55601	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.738522053 CEST	443	55601	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.746335983 CEST	443	55597	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.746414900 CEST	443	55597	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.746588945 CEST	55597	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.746946096 CEST	55597	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.746946096 CEST	55597	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.746989965 CEST	443	55597	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.747021914 CEST	443	55597	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.748899937 CEST	55602	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.748996019 CEST	443	55602	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:52.749075890 CEST	55602	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.749197006 CEST	55602	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:52.749229908 CEST	443	55602	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.061916113 CEST	443	55598	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.062485933 CEST	55598	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.062525034 CEST	443	55598	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.062959909 CEST	55598	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.062967062 CEST	443	55598	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.193520069 CEST	443	55598	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.193671942 CEST	443	55598	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.193768978 CEST	55598	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.193837881 CEST	55598	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.193855047 CEST	443	55598	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.193869114 CEST	55598	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.193875074 CEST	443	55598	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.196536064 CEST	55603	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.196571112 CEST	443	55603	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.196672916 CEST	55603	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.196872950 CEST	55603	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.196887970 CEST	443	55603	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.384685993 CEST	443	55599	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.385247946 CEST	55599	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.385327101 CEST	443	55599	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.385730028 CEST	55599	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.385746956 CEST	443	55599	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.432777882 CEST	443	55600	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.433475018 CEST	55600	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.433556080 CEST	443	55600	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.434024096 CEST	55600	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.434037924 CEST	443	55600	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.476938009 CEST	443	55601	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.477670908 CEST	55601	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.477670908 CEST	55601	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.477694988 CEST	443	55601	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.477701902 CEST	443	55601	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.492779016 CEST	443	55602	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.493510962 CEST	55602	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.493510962 CEST	55602	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.493545055 CEST	443	55602	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.493566036 CEST	443	55602	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.513623953 CEST	443	55599	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.514142036 CEST	443	55599	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.514291048 CEST	55599	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.514292002 CEST	55599	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.514370918 CEST	55599	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.514406919 CEST	443	55599	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.517194033 CEST	55604	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.517239094 CEST	443	55604	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.517452002 CEST	55604	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.517541885 CEST	55604	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.517560005 CEST	443	55604	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.563822985 CEST	443	55600	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.563884974 CEST	443	55600	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.564033031 CEST	55600	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.564033031 CEST	55600	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.564244986 CEST	55600	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.564271927 CEST	443	55600	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.566097021 CEST	55605	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.566179037 CEST	443	55605	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.566291094 CEST	55605	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.566422939 CEST	55605	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.566457033 CEST	443	55605	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.607667923 CEST	443	55601	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.607763052 CEST	443	55601	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.607872963 CEST	443	55601	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.607892036 CEST	55601	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.607976913 CEST	55601	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.607976913 CEST	55601	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.608011961 CEST	55601	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.608025074 CEST	443	55601	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.609860897 CEST	55606	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.609894037 CEST	443	55606	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.610107899 CEST	55606	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.610107899 CEST	55606	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.610162020 CEST	443	55606	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.625786066 CEST	443	55602	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.625950098 CEST	443	55602	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.626033068 CEST	55602	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.626070976 CEST	55602	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.626070976 CEST	55602	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.626090050 CEST	443	55602	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.626108885 CEST	443	55602	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.627840042 CEST	55607	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.627891064 CEST	443	55607	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.628094912 CEST	55607	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.628094912 CEST	55607	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.628179073 CEST	443	55607	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.945441008 CEST	443	55603	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.946407080 CEST	55603	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.946407080 CEST	55603	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:53.946433067 CEST	443	55603	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:53.946440935 CEST	443	55603	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.078061104 CEST	443	55603	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.078217983 CEST	443	55603	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.078428984 CEST	55603	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.078428984 CEST	55603	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.078459024 CEST	55603	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.078471899 CEST	443	55603	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.081274986 CEST	55608	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.081330061 CEST	443	55608	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.081888914 CEST	55608	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.081888914 CEST	55608	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.082015991 CEST	443	55608	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.263698101 CEST	443	55604	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.264327049 CEST	55604	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.264373064 CEST	443	55604	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.264827967 CEST	55604	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.264854908 CEST	443	55604	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.312701941 CEST	443	55605	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.313556910 CEST	55605	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.313556910 CEST	55605	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.313648939 CEST	443	55605	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.313683033 CEST	443	55605	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.341079950 CEST	443	55606	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.341825962 CEST	55606	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.341825962 CEST	55606	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.341867924 CEST	443	55606	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.341881990 CEST	443	55606	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.386859894 CEST	443	55607	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.387928009 CEST	55607	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.387928009 CEST	55607	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.388012886 CEST	443	55607	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.388045073 CEST	443	55607	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.394936085 CEST	443	55604	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.395011902 CEST	443	55604	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.395180941 CEST	55604	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.395262003 CEST	55604	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.395262003 CEST	55604	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.395303965 CEST	443	55604	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.395365000 CEST	443	55604	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.398070097 CEST	55609	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.398101091 CEST	443	55609	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.398296118 CEST	55609	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.398296118 CEST	55609	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.398323059 CEST	443	55609	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.445240974 CEST	443	55605	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.445260048 CEST	443	55605	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.445337057 CEST	443	55605	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.445530891 CEST	55605	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.445530891 CEST	55605	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.445532084 CEST	55605	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.445532084 CEST	55605	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.447458029 CEST	55610	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.447541952 CEST	443	55610	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.447825909 CEST	55610	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.447825909 CEST	55610	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.447953939 CEST	443	55610	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.469305992 CEST	443	55606	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.469374895 CEST	443	55606	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.469482899 CEST	443	55606	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.469537020 CEST	55606	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.469775915 CEST	55606	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.469775915 CEST	55606	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.469944000 CEST	55606	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.469980001 CEST	443	55606	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.471702099 CEST	55611	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.471714973 CEST	443	55611	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.471805096 CEST	55611	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.471924067 CEST	55611	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.471935987 CEST	443	55611	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.516738892 CEST	443	55607	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.517036915 CEST	443	55607	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.517091036 CEST	443	55607	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.517149925 CEST	55607	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.517149925 CEST	55607	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.517236948 CEST	55607	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.517236948 CEST	55607	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.517277002 CEST	443	55607	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.517307043 CEST	443	55607	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.519155979 CEST	55612	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.519195080 CEST	443	55612	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.519614935 CEST	55612	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.519614935 CEST	55612	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.519649982 CEST	443	55612	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.751876116 CEST	55605	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.751936913 CEST	443	55605	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.832550049 CEST	443	55608	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.833740950 CEST	55608	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.833740950 CEST	55608	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.833827972 CEST	443	55608	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.833861113 CEST	443	55608	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.972254992 CEST	443	55608	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.972431898 CEST	443	55608	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.972585917 CEST	55608	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.972666025 CEST	55608	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.972703934 CEST	443	55608	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.972754955 CEST	55608	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.972770929 CEST	443	55608	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.976295948 CEST	55613	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.976324081 CEST	443	55613	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:54.976514101 CEST	55613	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.976514101 CEST	55613	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:54.976542950 CEST	443	55613	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.150361061 CEST	443	55609	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.151005983 CEST	55609	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.151017904 CEST	443	55609	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.151593924 CEST	55609	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.151598930 CEST	443	55609	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.182966948 CEST	443	55610	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.183856010 CEST	55610	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.183944941 CEST	443	55610	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.184382915 CEST	55610	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.184437037 CEST	443	55610	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.233371973 CEST	443	55611	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.234282970 CEST	55611	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.234282970 CEST	55611	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.234297991 CEST	443	55611	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.234304905 CEST	443	55611	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.261527061 CEST	443	55612	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.262430906 CEST	55612	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.262430906 CEST	55612	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.262471914 CEST	443	55612	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.262486935 CEST	443	55612	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.287810087 CEST	443	55609	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.288111925 CEST	443	55609	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.288163900 CEST	443	55609	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.288253069 CEST	55609	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.288253069 CEST	55609	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.288253069 CEST	55609	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.288697004 CEST	55609	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.288710117 CEST	443	55609	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.291162968 CEST	55615	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.291199923 CEST	443	55615	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.291327000 CEST	55615	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.291448116 CEST	55615	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.291462898 CEST	443	55615	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.318268061 CEST	443	55610	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.318348885 CEST	443	55610	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.318667889 CEST	55610	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.318667889 CEST	55610	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.318667889 CEST	55610	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.321057081 CEST	55616	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.321070910 CEST	443	55616	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.321139097 CEST	55616	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.321413994 CEST	55616	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.321428061 CEST	443	55616	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.367969990 CEST	443	55611	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.367997885 CEST	443	55611	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.368077040 CEST	55611	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.368091106 CEST	443	55611	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.368309975 CEST	443	55611	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.368438005 CEST	55611	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.368438005 CEST	55611	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.368751049 CEST	55611	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.368762016 CEST	443	55611	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.372497082 CEST	55617	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.372530937 CEST	443	55617	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.372607946 CEST	55617	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.372783899 CEST	55617	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.372801065 CEST	443	55617	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.396290064 CEST	443	55612	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.396363020 CEST	443	55612	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.396431923 CEST	55612	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.396476030 CEST	443	55612	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.396738052 CEST	55612	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.396738052 CEST	55612	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.396778107 CEST	55612	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.396795034 CEST	443	55612	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.398902893 CEST	55618	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.398926020 CEST	443	55618	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.399493933 CEST	55618	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.399640083 CEST	55618	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.399650097 CEST	443	55618	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.624913931 CEST	55610	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.624974966 CEST	443	55610	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.680130005 CEST	55619	443	192.168.2.4	172.217.16.206
Oct 24, 2024 01:35:55.680166960 CEST	443	55619	172.217.16.206	192.168.2.4
Oct 24, 2024 01:35:55.680269957 CEST	55619	443	192.168.2.4	172.217.16.206
Oct 24, 2024 01:35:55.680802107 CEST	55619	443	192.168.2.4	172.217.16.206
Oct 24, 2024 01:35:55.680814028 CEST	443	55619	172.217.16.206	192.168.2.4
Oct 24, 2024 01:35:55.728988886 CEST	443	55613	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.729697943 CEST	55613	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.729729891 CEST	443	55613	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.730375051 CEST	55613	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.730381966 CEST	443	55613	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.860440969 CEST	443	55613	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.861269951 CEST	443	55613	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.861421108 CEST	443	55613	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.861517906 CEST	55613	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.861517906 CEST	55613	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.861926079 CEST	55613	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.861949921 CEST	443	55613	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.864239931 CEST	55620	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.864270926 CEST	443	55620	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:55.864979982 CEST	55620	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.865329027 CEST	55620	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:55.865339041 CEST	443	55620	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.034392118 CEST	443	55615	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.034939051 CEST	55615	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.034955025 CEST	443	55615	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.035334110 CEST	55615	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.035337925 CEST	443	55615	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.051542997 CEST	443	55616	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.052263975 CEST	55616	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.052263975 CEST	55616	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.052279949 CEST	443	55616	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.052288055 CEST	443	55616	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.125968933 CEST	443	55617	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.127037048 CEST	55617	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.127037048 CEST	55617	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.127057076 CEST	443	55617	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.127077103 CEST	443	55617	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.155898094 CEST	443	55618	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.156703949 CEST	55618	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.156704903 CEST	55618	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.156727076 CEST	443	55618	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.156737089 CEST	443	55618	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.166383982 CEST	443	55615	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.166572094 CEST	443	55615	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.166737080 CEST	55615	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.166737080 CEST	55615	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.166796923 CEST	55615	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.166812897 CEST	443	55615	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.169689894 CEST	55621	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.169733047 CEST	443	55621	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.169883013 CEST	55621	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.169992924 CEST	55621	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.170001984 CEST	443	55621	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.184828043 CEST	443	55616	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.184978962 CEST	443	55616	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.185087919 CEST	55616	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.185087919 CEST	55616	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.185168028 CEST	55616	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.185175896 CEST	443	55616	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.187300920 CEST	55622	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.187338114 CEST	443	55622	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.187433958 CEST	55622	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.187580109 CEST	55622	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.187592030 CEST	443	55622	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.260711908 CEST	443	55617	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.260874033 CEST	443	55617	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.261034012 CEST	55617	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.261034966 CEST	55617	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.261172056 CEST	55617	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.261187077 CEST	443	55617	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.264202118 CEST	55623	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.264245033 CEST	443	55623	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.264439106 CEST	55623	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.264564991 CEST	55623	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.264580011 CEST	443	55623	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.289362907 CEST	443	55618	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.289433002 CEST	443	55618	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.289558887 CEST	443	55618	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.289618969 CEST	55618	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.289681911 CEST	55618	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.289681911 CEST	55618	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.289879084 CEST	55618	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.289895058 CEST	443	55618	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.291785002 CEST	55624	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.291871071 CEST	443	55624	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.292252064 CEST	55624	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.292253017 CEST	55624	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.292382002 CEST	443	55624	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.543209076 CEST	443	55619	172.217.16.206	192.168.2.4
Oct 24, 2024 01:35:56.593030930 CEST	55619	443	192.168.2.4	172.217.16.206
Oct 24, 2024 01:35:56.601620913 CEST	443	55620	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.602621078 CEST	55620	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.602644920 CEST	443	55620	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.603317976 CEST	55620	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.603324890 CEST	443	55620	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.730828047 CEST	443	55620	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.730977058 CEST	443	55620	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.731147051 CEST	55620	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.731332064 CEST	55620	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.731345892 CEST	443	55620	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.731388092 CEST	55620	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.731394053 CEST	443	55620	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.734503984 CEST	55626	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.734587908 CEST	443	55626	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.734677076 CEST	55626	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.734838009 CEST	55626	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.734873056 CEST	443	55626	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.926223993 CEST	443	55621	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.926959991 CEST	55621	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.927040100 CEST	443	55621	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.927594900 CEST	55621	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.927611113 CEST	443	55621	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.932841063 CEST	443	55622	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.933547020 CEST	55622	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.933561087 CEST	443	55622	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:56.933890104 CEST	55622	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:56.933893919 CEST	443	55622	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.000045061 CEST	443	55623	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.000394106 CEST	55623	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.000431061 CEST	443	55623	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.000843048 CEST	55623	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.000849962 CEST	443	55623	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.040934086 CEST	443	55624	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.041441917 CEST	55624	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.041524887 CEST	443	55624	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.041929960 CEST	55624	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.041985035 CEST	443	55624	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.061065912 CEST	443	55621	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.061090946 CEST	443	55621	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.061131001 CEST	443	55621	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.061186075 CEST	55621	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.061323881 CEST	55621	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.061357975 CEST	443	55621	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.061398983 CEST	55621	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.061414003 CEST	443	55621	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.064830065 CEST	55627	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.064913988 CEST	443	55627	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.065011978 CEST	55627	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.065262079 CEST	55627	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.065314054 CEST	443	55627	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.066010952 CEST	443	55622	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.066209078 CEST	443	55622	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.066332102 CEST	55622	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.066332102 CEST	55622	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.066332102 CEST	55622	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.068552971 CEST	55628	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.068572044 CEST	443	55628	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.068645000 CEST	55628	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.068856955 CEST	55628	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.068872929 CEST	443	55628	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.129450083 CEST	443	55623	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.129515886 CEST	443	55623	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.129584074 CEST	55623	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.129614115 CEST	443	55623	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.129637957 CEST	443	55623	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.129686117 CEST	55623	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.129779100 CEST	55623	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.129795074 CEST	443	55623	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.129806995 CEST	55623	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.129813910 CEST	443	55623	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.132071018 CEST	55629	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.132148027 CEST	443	55629	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.132219076 CEST	55629	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.132316113 CEST	55629	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.132344961 CEST	443	55629	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.170485973 CEST	443	55624	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.170669079 CEST	443	55624	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.170751095 CEST	55624	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.170906067 CEST	55624	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.170948982 CEST	443	55624	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.170967102 CEST	55624	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.170984030 CEST	443	55624	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.174092054 CEST	55630	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.174118042 CEST	443	55630	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.174173117 CEST	55630	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.174336910 CEST	55630	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.174350023 CEST	443	55630	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.372416973 CEST	55622	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.372437000 CEST	443	55622	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.696443081 CEST	443	55626	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.697424889 CEST	55626	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.697426081 CEST	55626	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.697482109 CEST	443	55626	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.697509050 CEST	443	55626	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.816354990 CEST	443	55628	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.817285061 CEST	55628	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.817285061 CEST	55628	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.817301035 CEST	443	55628	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.817307949 CEST	443	55628	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.820554972 CEST	443	55627	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.821194887 CEST	55627	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.821196079 CEST	55627	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.821274996 CEST	443	55627	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.821306944 CEST	443	55627	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.828242064 CEST	443	55626	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.828403950 CEST	443	55626	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.828552008 CEST	55626	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.828552008 CEST	55626	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.828552008 CEST	55626	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.831118107 CEST	55631	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.831166983 CEST	443	55631	13.107.246.45	192.168.2.4
Oct 24, 2024 01:35:57.831306934 CEST	55631	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.831379890 CEST	55631	443	192.168.2.4	13.107.246.45
Oct 24, 2024 01:35:57.831397057 CEST	443	55631	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 01:34:34.935841084 CEST	53	57086	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:34.936247110 CEST	53	60101	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:36.307854891 CEST	53	56585	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:36.471177101 CEST	55593	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:36.471343040 CEST	63027	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:36.479566097 CEST	53	55593	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:36.479904890 CEST	53	63027	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:38.590075016 CEST	60516	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:38.590169907 CEST	55208	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:39.469640970 CEST	53	55208	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:39.469750881 CEST	53	60516	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:41.364428997 CEST	53	59445	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:48.179786921 CEST	138	138	192.168.2.4	192.168.2.255
Oct 24, 2024 01:34:48.586126089 CEST	53	56660	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:53.482270002 CEST	52952	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:53.482458115 CEST	53169	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:53.489986897 CEST	53	52952	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:53.490034103 CEST	53	53169	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:54.796302080 CEST	55490	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:54.796302080 CEST	59228	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:54.803767920 CEST	53	59228	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:54.810887098 CEST	53	55490	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:54.994971991 CEST	53	62746	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:57.175033092 CEST	55821	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:57.175081015 CEST	50648	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:57.182723999 CEST	53	55821	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:57.182955980 CEST	53	50648	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:58.463562012 CEST	60716	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:58.463705063 CEST	56694	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:34:58.471155882 CEST	53	60716	1.1.1.1	192.168.2.4
Oct 24, 2024 01:34:58.471193075 CEST	53	56694	1.1.1.1	192.168.2.4
Oct 24, 2024 01:35:34.583547115 CEST	53	57046	1.1.1.1	192.168.2.4
Oct 24, 2024 01:35:55.137859106 CEST	53	62830	1.1.1.1	192.168.2.4
Oct 24, 2024 01:35:55.671305895 CEST	60452	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:35:55.671307087 CEST	62013	53	192.168.2.4	1.1.1.1
Oct 24, 2024 01:35:55.679404974 CEST	53	62013	1.1.1.1	192.168.2.4
Oct 24, 2024 01:35:55.679699898 CEST	53	60452	1.1.1.1	192.168.2.4
Oct 24, 2024 01:35:56.359070063 CEST	53	56705	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 01:34:36.471177101 CEST	192.168.2.4	1.1.1.1	0xb7ec	Standard query (0)	chat.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:34:36.471343040 CEST	192.168.2.4	1.1.1.1	0x2976	Standard query (0)	chat.google.com	65	IN (0x0001)	false
Oct 24, 2024 01:34:38.590075016 CEST	192.168.2.4	1.1.1.1	0xc673	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:34:38.590169907 CEST	192.168.2.4	1.1.1.1	0x33dd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 01:34:53.482270002 CEST	192.168.2.4	1.1.1.1	0x5fc2	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:34:53.482458115 CEST	192.168.2.4	1.1.1.1	0xb662	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Oct 24, 2024 01:34:54.796302080 CEST	192.168.2.4	1.1.1.1	0x1196	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:34:54.796302080 CEST	192.168.2.4	1.1.1.1	0x5bda	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 24, 2024 01:34:57.175033092 CEST	192.168.2.4	1.1.1.1	0xb05c	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:34:57.175081015 CEST	192.168.2.4	1.1.1.1	0xc4ea	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 24, 2024 01:34:58.463562012 CEST	192.168.2.4	1.1.1.1	0xee71	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:34:58.463705063 CEST	192.168.2.4	1.1.1.1	0x6ecd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 01:35:55.671305895 CEST	192.168.2.4	1.1.1.1	0x12ab	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:35:55.671307087 CEST	192.168.2.4	1.1.1.1	0x55e1	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 01:34:36.479566097 CEST	1.1.1.1	192.168.2.4	0xb7ec	No error (0)	chat.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:34:39.469640970 CEST	1.1.1.1	192.168.2.4	0x33dd	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 01:34:39.469750881 CEST	1.1.1.1	192.168.2.4	0xc673	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:34:51.461668015 CEST	1.1.1.1	192.168.2.4	0xdbf4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:34:51.461668015 CEST	1.1.1.1	192.168.2.4	0xdbf4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:34:53.489986897 CEST	1.1.1.1	192.168.2.4	0x5fc2	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:34:53.489986897 CEST	1.1.1.1	192.168.2.4	0x5fc2	No error (0)	www3.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:34:53.490034103 CEST	1.1.1.1	192.168.2.4	0xb662	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:34:54.810887098 CEST	1.1.1.1	192.168.2.4	0x1196	No error (0)	play.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:34:57.182723999 CEST	1.1.1.1	192.168.2.4	0xb05c	No error (0)	play.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:34:58.471155882 CEST	1.1.1.1	192.168.2.4	0xee71	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:34:58.471193075 CEST	1.1.1.1	192.168.2.4	0x6ecd	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 01:35:24.098553896 CEST	1.1.1.1	192.168.2.4	0x42b6	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:35:24.098553896 CEST	1.1.1.1	192.168.2.4	0x42b6	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:35:47.875745058 CEST	1.1.1.1	192.168.2.4	0x4d9e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 01:35:47.875745058 CEST	1.1.1.1	192.168.2.4	0x4d9e	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 01:35:55.679699898 CEST	1.1.1.1	192.168.2.4	0x12ab	No error (0)	play.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

chat.google.com

fs.microsoft.com

slscr.update.microsoft.com

https:

accounts.youtube.com

play.google.com

www.google.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	142.250.185.206	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:34:37 UTC	848	OUT	GET /dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10 HTTP/1.1 Host: chat.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 23:34:37 UTC	4470	IN	HTTP/1.1 302 Found Content-Type: application/binary X-Frame-Options: DENY Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Timing-Allow-Origin: https://mail.google.com Location: https://accounts.google.com/ServiceLogin?service=dynamite&passive=1209600&osid=1&continue=https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls%3D10 P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: same-site Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-pE22Kx7wau9LebHQdKLWeg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DynamiteWebUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.youtube.com/iframe_api https://s.ytimg.com/yts/jsbin/ https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DynamiteWebUi/cspreport/allowlist;frame-src https://tracedepot-pa.clients6.google.com/static/ https://clients6.google.com/static/ https://docs.google.com/ https://docs.sandbox.google.com/ https://docs-qa.corp.google.com/ https://docs.google.com/picker/ https://content.googleapis.com/static/ https://contacts.google.com/ https://clients5.google.com/pagead/drt/dn/ https://drive.google.com/ https://dynamiteintegration-pa-staging-googleapis.sandbox.google.com https://dynamiteintegration-p [TRUNCATED] Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DynamiteWebUi/cspreport Report-To: {"group":"DynamiteWebUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/DynamiteWebUi"}]} Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="DynamiteWebUi" Cross-Origin-Opener-Policy: same-origin Date: Wed, 23 Oct 2024 23:34:37 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Set-Cookie: NID=518=oo9OJTZ-hq3Wyk66-uiVCnP4yVz8CG7GM2CooIMbQE1WIxG4C0Yq5zdoxf0A0jKZOU7FrUKVoYLe_2hzQkn8hZFXN2WGxS0Is5HLC4Txi-wD_uGdfPHXUfxa0YJavHn__AshuVLcMabGdbO6F0WDAewsX_ahumOmKxi-D_n_2qb2SZWrnkQ; expires=Thu, 24-Apr-2025 23:34:37 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:34:40 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 23:34:40 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=61892 Date: Wed, 23 Oct 2024 23:34:40 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:34:41 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 23:34:42 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=61860 Date: Wed, 23 Oct 2024 23:34:41 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 23:34:42 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	55397	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:34:49 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6n1oRnYwED+n9ch&MD=sUpoZ3L2 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 23:34:49 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 8502aae3-2c74-453f-a3e8-a5fbff20a4d4 MS-RequestId: e3b81535-a26c-4b41-904a-9a33c0dc02ce MS-CV: T2cVCa/0g0CLi/bL.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 23:34:48 GMT Connection: close Content-Length: 24490
2024-10-23 23:34:49 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-23 23:34:49 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	55422	142.250.181.238	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:34:54 UTC	1224	OUT	GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-115377987&timestamp=1729726492797 HTTP/1.1 Host: accounts.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 23:34:54 UTC	1969	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://accounts.google.com Content-Security-Policy: frame-ancestors https://accounts.google.com Content-Security-Policy: script-src 'report-sample' 'nonce-DYg8UlR9qkFOjHv9p9kd-A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 23 Oct 2024 23:34:54 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/AccountsDomainCookiesCheckConnectionHttp/web-reports?context=eJzjstDikmLw1ZBikPj6kkkDiJ3SZ7AGAXHSv_OsRUB8ufsS63UgVu25xGoKxEUSV1ibgFiIh2PehGc72AQ-rJ33j1FJLym_MD4zJTWvJLOkMiU_NzEzLzk_Pzsztbg4tagstSjeyMDIxNDA0FjPwCK-wAAA6iUtsg" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 23:34:54 UTC	1969	IN	Data Raw: 37 35 62 37 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 44 59 67 38 55 6c 52 39 71 6b 46 4f 6a 48 76 39 70 39 6b 64 2d 41 22 3e 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f Data Ascii: 75b7<html><head><script nonce="DYg8UlR9qkFOjHv9p9kd-A">"use strict";this.default_AccountsDomaincookiesCheckconnectionJs=this.default_AccountsDomaincookiesCheckconnectionJs\|\|{};(function(_){var window=this;try{_._F_toggles_initialize=function(a){(typeo
2024-10-23 23:34:54 UTC	1969	IN	Data Raw: 72 69 64 65 6e 74 5c 2f 28 5c 64 2e 5c 64 29 2f 2e 65 78 65 63 28 62 29 2c 0a 63 5b 31 5d 3d 3d 22 37 2e 30 22 29 69 66 28 62 26 26 62 5b 31 5d 29 73 77 69 74 63 68 28 62 5b 31 5d 29 7b 63 61 73 65 20 22 34 2e 30 22 3a 61 3d 22 38 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 35 2e 30 22 3a 61 3d 22 39 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 36 2e 30 22 3a 61 3d 22 31 30 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 37 2e 30 22 3a 61 3d 22 31 31 2e 30 22 7d 65 6c 73 65 20 61 3d 22 37 2e 30 22 3b 65 6c 73 65 20 61 3d 63 5b 31 5d 3b 62 3d 61 7d 65 6c 73 65 20 62 3d 22 22 3b 72 65 74 75 72 6e 20 62 7d 76 61 72 20 64 3d 52 65 67 45 78 70 28 22 28 5b 41 2d 5a 5d 5b 5c 5c 77 20 5d 2b 29 2f 28 5b 5e 5c 5c 73 5d 2b 29 5c 5c 73 2a 28 3f 3a 5c 5c 28 28 Data Ascii: rident\/(\d.\d)/.exec(b),c[1]=="7.0")if(b&&b[1])switch(b[1]){case "4.0":a="8.0";break;case "5.0":a="9.0";break;case "6.0":a="10.0";break;case "7.0":a="11.0"}else a="7.0";else a=c[1];b=a}else b="";return b}var d=RegExp("([A-Z][\\w ]+)/([^\\s]+)\\s*(?:\\((
2024-10-23 23:34:54 UTC	1969	IN	Data Raw: 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 69 67 69 6e 74 22 3a 72 65 74 75 72 6e 28 41 61 3f 0a 61 3e 3d 42 61 26 26 61 3c 3d 43 61 3a 61 5b 30 5d 3d 3d 3d 22 2d 22 3f 75 61 28 61 2c 44 61 29 3a 75 61 28 61 2c 45 61 29 29 3f 4e 75 6d 62 65 72 28 61 29 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 69 66 28 43 28 61 29 29 72 65 74 75 72 6e 7d 65 6c 73 65 20 69 66 28 46 61 26 26 61 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 73 Data Ascii: ch(typeof a){case "number":return isFinite(a)?a:String(a);case "bigint":return(Aa?a>=Ba&&a<=Ca:a[0]==="-"?ua(a,Da):ua(a,Ea))?Number(a):String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(C(a))return}else if(Fa&&a!=null&&a ins
2024-10-23 23:34:54 UTC	1969	IN	Data Raw: 76 61 72 20 62 3b 69 66 28 61 26 26 28 62 3d 51 61 29 21 3d 6e 75 6c 6c 26 26 62 2e 68 61 73 28 61 29 26 26 28 62 3d 61 2e 43 29 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 69 66 28 63 3d 3d 3d 62 2e 6c 65 6e 67 74 68 2d 31 26 26 41 28 64 29 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 7b 76 61 72 20 66 3d 64 5b 65 5d 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 66 29 26 26 0a 52 61 28 66 2c 61 29 7d 65 6c 73 65 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 64 29 26 26 52 61 28 64 2c 61 29 7d 61 3d 45 3f 61 2e 43 3a 4d 61 28 61 2e 43 2c 50 61 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 31 29 3b 65 3d 21 45 3b 69 66 28 62 3d 61 2e 6c 65 6e 67 74 68 29 7b 64 3d 61 5b 62 2d 31 Data Ascii: var b;if(a&&(b=Qa)!=null&&b.has(a)&&(b=a.C))for(var c=0;c<b.length;c++){var d=b[c];if(c===b.length-1&&A(d))for(var e in d){var f=d[e];Array.isArray(f)&&Ra(f,a)}else Array.isArray(d)&&Ra(d,a)}a=E?a.C:Ma(a.C,Pa,void 0,void 0,!1);e=!E;if(b=a.length){d=a[b-1
2024-10-23 23:34:54 UTC	1969	IN	Data Raw: 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 63 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 57 61 5b 62 5b 63 5d 5d 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f Data Ascii: l.iterator",function(a){if(a)return a;a=Symbol("c");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=Wa[b[c]];typeof d==="function"&&typeo
2024-10-23 23:34:54 UTC	1969	IN	Data Raw: 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 65 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 2e 67 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6b 29 7b 6b 3d 48 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 63 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 22 29 3b 64 28 6b 29 3b 69 66 28 21 49 28 6b 2c 66 29 29 74 Data Ascii: ;e("freeze");e("preventExtensions");e("seal");var h=0,g=function(k){this.g=(h+=Math.random()+1).toString();if(k){k=H(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};g.prototype.set=function(k,l){if(!c(k))throw Error("i");d(k);if(!I(k,f))t
2024-10-23 23:34:54 UTC	1969	IN	Data Raw: 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 2e 68 61 73 28 6b 29 3f Data Ascii: rn g.value})};c.prototype.forEach=function(g,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};c.prototype[Symbol.iterator]=c.prototype.entries;var d=function(g,k){var l=k&&typeof k;l=="object"\|\|l=="function"?b.has(k)?
2024-10-23 23:34:54 UTC	1969	IN	Data Raw: 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 69 73 4e 61 4e 28 62 29 7d 7d 29 3b 76 61 72 20 66 62 3d 66 62 7c 7c 7b 7d 2c 71 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 67 62 3d 71 2e 5f 46 5f 74 6f 67 67 6c 65 73 7c 7c 5b 5d 2c 68 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 71 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 69 62 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 Data Ascii: n(a){return a?a:function(b){return typeof b==="number"&&isNaN(b)}});var fb=fb\|\|{},q=this\|\|self,gb=q._F_toggles\|\|[],hb=function(a){a=a.split(".");for(var b=q,c=0;c<a.length;c++)if(b=b[a[c]],b==null)return null;return b},ib="closure_uid_"+(Math.random()*1E9
2024-10-23 23:34:54 UTC	1969	IN	Data Raw: 65 78 74 5f 5f 39 38 34 33 38 32 3d 7b 7d 29 3b 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 2e 73 65 76 65 72 69 74 79 3d 62 7d 3b 76 61 72 20 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 3d 63 7c 7c 71 3b 76 61 72 20 64 3d 63 2e 6f 6e 65 72 72 6f 72 2c 65 3d 21 21 62 3b 63 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 2c 67 2c 6b 2c 6c 29 7b 64 26 26 64 28 66 2c 68 2c 67 2c 6b 2c 6c 29 3b 61 28 7b 6d 65 73 73 61 67 65 3a 66 2c 66 69 6c 65 4e 61 6d 65 3a 68 2c 6c 69 6e 65 3a 67 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 67 2c 62 61 3a 6b 2c 65 72 72 6f 72 3a 6c 7d 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 68 62 Data Ascii: ext__984382={});a.__closure__error__context__984382.severity=b};var qb=function(a,b,c){c=c\|\|q;var d=c.onerror,e=!!b;c.onerror=function(f,h,g,k,l){d&&d(f,h,g,k,l);a({message:f,fileName:h,line:g,lineNumber:g,ba:k,error:l});return e}},tb=function(a){var b=hb
2024-10-23 23:34:54 UTC	1969	IN	Data Raw: 72 2c 5b 5d 29 29 3b 72 65 74 75 72 6e 20 62 7d 2c 77 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 69 66 28 61 61 28 62 2c 61 29 3e 3d 30 29 63 2e 70 75 73 68 28 22 5b 2e 2e 2e 63 69 72 63 75 6c 61 72 20 72 65 66 65 72 65 6e 63 65 2e 2e 2e 5d 22 29 3b 65 6c 73 65 20 69 66 28 61 26 26 62 2e 6c 65 6e 67 74 68 3c 0a 35 30 29 7b 63 2e 70 75 73 68 28 73 62 28 61 29 2b 22 28 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 61 2e 61 72 67 75 6d 65 6e 74 73 2c 65 3d 30 3b 64 26 26 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 65 3e 30 26 26 63 2e 70 75 73 68 28 22 2c 20 22 29 3b 76 61 72 20 66 3d 64 5b 65 5d 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 66 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 66 3d 66 3f 22 6f 62 6a 65 63 74 22 3a Data Ascii: r,[]));return b},wb=function(a,b){var c=[];if(aa(b,a)>=0)c.push("[...circular reference...]");else if(a&&b.length<50){c.push(sb(a)+"(");for(var d=a.arguments,e=0;d&&e<d.length;e++){e>0&&c.push(", ");var f=d[e];switch(typeof f){case "object":f=f?"object":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	55427	142.250.186.142	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:34:55 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 23:34:55 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 23:34:55 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	55428	142.250.186.142	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:34:55 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 23:34:56 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 23:34:55 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	55432	142.250.186.142	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:34:56 UTC	1329	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 522 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=oo9OJTZ-hq3Wyk66-uiVCnP4yVz8CG7GM2CooIMbQE1WIxG4C0Yq5zdoxf0A0jKZOU7FrUKVoYLe_2hzQkn8hZFXN2WGxS0Is5HLC4Txi-wD_uGdfPHXUfxa0YJavHn__AshuVLcMabGdbO6F0WDAewsX_ahumOmKxi-D_n_2qb2SZWrnkQ
2024-10-23 23:34:56 UTC	522	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 39 37 32 36 34 39 34 31 32 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"32",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1729726494125",null,null,n
2024-10-23 23:34:57 UTC	941	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=Ko7fyT-LLfWIj9ktg3dzrPB1UuD_9ZuOypuHCczly1jxhz212NvnCvvpU0sAqKfY_s78BCl60_7VT5QqNZKAMA6MdQDeZYdGPIFtPS_JkgCdYY5RxzBzGQjFWLP-AJBe_hAlbD7ZllouAXoURnhg3dy3ezSzASpUjjTltY6kiG6sVtKxcYXosCr8sFw; expires=Thu, 24-Apr-2025 23:34:56 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 23:34:56 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 23 Oct 2024 23:34:56 GMT Connection: close Transfer-Encoding: chunked
2024-10-23 23:34:57 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-23 23:34:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	55434	142.250.186.142	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:34:56 UTC	1329	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 522 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=oo9OJTZ-hq3Wyk66-uiVCnP4yVz8CG7GM2CooIMbQE1WIxG4C0Yq5zdoxf0A0jKZOU7FrUKVoYLe_2hzQkn8hZFXN2WGxS0Is5HLC4Txi-wD_uGdfPHXUfxa0YJavHn__AshuVLcMabGdbO6F0WDAewsX_ahumOmKxi-D_n_2qb2SZWrnkQ
2024-10-23 23:34:56 UTC	522	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 39 37 32 36 34 39 34 32 30 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"32",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1729726494201",null,null,n
2024-10-23 23:34:57 UTC	941	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA; expires=Thu, 24-Apr-2025 23:34:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 23:34:57 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 23 Oct 2024 23:34:57 GMT Connection: close Transfer-Encoding: chunked
2024-10-23 23:34:57 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-23 23:34:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	55438	172.217.18.110	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:34:58 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=Ko7fyT-LLfWIj9ktg3dzrPB1UuD_9ZuOypuHCczly1jxhz212NvnCvvpU0sAqKfY_s78BCl60_7VT5QqNZKAMA6MdQDeZYdGPIFtPS_JkgCdYY5RxzBzGQjFWLP-AJBe_hAlbD7ZllouAXoURnhg3dy3ezSzASpUjjTltY6kiG6sVtKxcYXosCr8sFw
2024-10-23 23:34:58 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 23 Oct 2024 23:34:58 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 23:34:58 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-23 23:34:58 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	55440	142.250.186.100	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:34:58 UTC	1230	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA
2024-10-23 23:34:58 UTC	704	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 23:25:55 GMT Expires: Thu, 31 Oct 2024 23:25:55 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 543 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 23:34:58 UTC	674	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-10-23 23:34:58 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv
2024-10-23 23:34:58 UTC	1378	IN	Data Raw: 34 ff 53 a8 34 ff 53 a8 34 ff 56 a9 37 ff b1 d2 9b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 Data Ascii: 4S4S4V7S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT
2024-10-23 23:34:58 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBBF!4I
2024-10-23 23:34:58 UTC	622	IN	Data Raw: 00 00 fe fe fe 26 fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: &$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	55441	172.217.18.110	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:34:59 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA
2024-10-23 23:34:59 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 23 Oct 2024 23:34:59 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 23:34:59 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-23 23:34:59 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	55442	216.58.206.68	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:34:59 UTC	651	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA
2024-10-23 23:34:59 UTC	704	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 23:25:55 GMT Expires: Thu, 31 Oct 2024 23:25:55 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 544 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 23:34:59 UTC	674	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-10-23 23:34:59 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv
2024-10-23 23:34:59 UTC	1378	IN	Data Raw: 34 ff 53 a8 34 ff 53 a8 34 ff 56 a9 37 ff b1 d2 9b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 Data Ascii: 4S4S4V7S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT
2024-10-23 23:34:59 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBBF!4I
2024-10-23 23:34:59 UTC	622	IN	Data Raw: 00 00 fe fe fe 26 fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: &$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	55443	142.250.186.142	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:02 UTC	1315	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1224 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA
2024-10-23 23:35:02 UTC	1224	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 35 38 2c 5b 5b 22 31 37 32 39 37 32 36 34 39 31 30 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],558,[["1729726491000",null,null,nu
2024-10-23 23:35:03 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 23:35:03 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 23:35:03 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-23 23:35:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	55444	172.217.18.110	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:04 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA
2024-10-23 23:35:04 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 23 Oct 2024 23:35:04 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 23:35:04 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-23 23:35:04 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	55445	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:24 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:25 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:24 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 04de7e24-801e-008f-0e20-242c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233524Z-16849878b78z5q7jpbgf6e9mcw00000006w000000000upf0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:35:25 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 23:35:25 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-23 23:35:25 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-23 23:35:25 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-23 23:35:25 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-23 23:35:25 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-23 23:35:25 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-23 23:35:25 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-23 23:35:25 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-23 23:35:26 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	55446	142.250.186.142	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:26 UTC	1337	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 792 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA
2024-10-23 23:35:26 UTC	792	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 39 37 32 36 35 32 34 39 35 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"32",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1729726524955",null,null,n
2024-10-23 23:35:26 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 23:35:26 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 23:35:26 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-23 23:35:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	55447	142.250.186.142	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:27 UTC	1298	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1031 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA
2024-10-23 23:35:27 UTC	1031	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 64 65 6e 74 69 74 79 66 72 6f 6e 74 65 6e 64 61 75 74 68 75 69 73 65 72 76 65 72 5f 32 30 32 34 31 30 32 30 2e 30 38 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_identityfrontendauthuiserver_20241020.08_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,
2024-10-23 23:35:27 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 23:35:27 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 23:35:27 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-23 23:35:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	55449	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:27 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:27 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233527Z-16849878b78gvgmlcfru6nuc5400000006w000000000a0vv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:27 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	55452	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:27 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:27 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 626c88a9-b01e-003d-54f3-24d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233527Z-15b8d89586fxdh48qknu9dqk2g000000022g00000000p2yg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:27 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	55448	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:27 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:27 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: ab85fd93-201e-006e-6bf3-24bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233527Z-r197bdfb6b4t7wszdvrfk02ah400000008b000000000pgda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:27 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	55451	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:27 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:27 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233527Z-16849878b7862vlcc7m66axrs000000006z0000000006n28 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:27 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	55450	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:27 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:27 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: e173b85d-401e-0035-56f2-2482d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233527Z-15b8d89586fvk4kmwqg9fgbkn800000002d000000000fv14 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:27 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	55453	172.217.18.110	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:27 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA
2024-10-23 23:35:27 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 23 Oct 2024 23:35:27 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 23:35:27 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-23 23:35:27 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	55454	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:28 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 734838af-101e-0065-4be5-214088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233528Z-16849878b78q4pnrt955f8nkx800000006qg00000000r5gm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	55455	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:28 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:28 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: b99e46b1-a01e-001e-0499-2549ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233528Z-15b8d89586fqckbz0ssbuzzp1n00000001a000000000e9rs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:35:28 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	55456	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:28 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:28 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233528Z-16849878b785g992cz2s9gk35c00000006v000000000pp3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:28 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	55457	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:28 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:28 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0a92035d-201e-00aa-57da-213928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233528Z-16849878b785jsrm4477mv3ezn00000006s000000000urq4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:28 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	55458	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:28 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:28 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: bcb88dd7-c01e-0079-47cd-21e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233528Z-16849878b78plcdqu15wsb886400000006yg000000000xkv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:28 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	55459	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:28 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6n1oRnYwED+n9ch&MD=sUpoZ3L2 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 23:35:28 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 272e7347-1f80-40f9-a816-c603f1696e06 MS-RequestId: 51ad918e-e6cf-4563-af0c-ef5940294ba7 MS-CV: FcRjs0qDCUeSBRIE.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 23:35:27 GMT Connection: close Content-Length: 30005
2024-10-23 23:35:28 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-23 23:35:29 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	55460	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:29 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:29 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233529Z-16849878b78z5q7jpbgf6e9mcw000000070000000000atuw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:35:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	55461	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:29 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:29 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:29 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 13862abc-a01e-0053-5aa2-218603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233529Z-16849878b78rjhv97f3nhawr7s00000006u000000000hpdp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:29 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	55462	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:29 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1b2fb3ba-201e-0033-65ce-20b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233529Z-16849878b78lhh9t0fb3392enw00000006rg00000000kdqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	55463	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:29 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:29 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 7d84539c-601e-00ab-7af2-2466f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233529Z-r197bdfb6b4sn8wg20e97vn7ps0000000nb000000000mk4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:29 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	55464	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:29 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7c0b2bc5-f01e-00aa-35ef-248521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233529Z-15b8d89586f2hk28h0h6zye26c00000000qg000000007k9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	55465	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:29 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:29 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 847e2871-001e-0079-66e3-2112e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233529Z-16849878b78plcdqu15wsb886400000006sg00000000qwyy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:30 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	55467	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:29 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:29 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: adf44397-501e-00a3-4c15-24c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233529Z-r197bdfb6b4kkrkjudg185sarw00000000xg00000000hca5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:30 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	55466	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:29 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:30 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 04b89afe-e01e-0003-7c15-250fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233530Z-r197bdfb6b46gt25anfa5gg2fw00000002e0000000006sw6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:30 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	55468	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:29 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:30 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ec40f21c-901e-0067-494d-22b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233530Z-16849878b78q4pnrt955f8nkx800000006sg00000000f1qq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:30 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	55469	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:30 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:30 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 968807c2-e01e-0052-0805-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233530Z-16849878b7862vlcc7m66axrs000000006vg00000000m640 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:30 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	55470	142.250.186.142	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:30 UTC	1337	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 897 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA
2024-10-23 23:35:30 UTC	897	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 32 39 37 32 36 35 32 38 34 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"32",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1729726528487",null,null,n
2024-10-23 23:35:30 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 23:35:30 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 23:35:30 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-23 23:35:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	55471	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:30 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 1a7ba294-f01e-0071-2df2-24431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233530Z-r197bdfb6b4t7wszdvrfk02ah400000008e000000000apqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	55472	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:30 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 1cb97257-a01e-0070-50f3-24573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233530Z-15b8d89586f8nxpt5xx0pk7du80000000450000000000mf7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:35:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	55473	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:30 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:30 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9956b93e-101e-0017-0e1a-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233530Z-r197bdfb6b4kq4j5t834fh90qn0000000a0g0000000077y1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:30 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	55474	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:30 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:30 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:30 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 00f7314e-e01e-0052-48ac-21d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233530Z-16849878b78s2lqfdex4tmpp7800000006yg000000008g9n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:30 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	55475	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:30 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:31 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: e5cf95c3-101e-0046-32f2-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233531Z-15b8d89586f6nn8zquf2vw6t54000000043g00000000423t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:31 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	55476	172.217.18.110	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:31 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=ObNRRb_jc664138aoyfHCulXwtTTuAUNqA_YjzdphO8MPZkWuBXZ4WjbljvDTW3zQ507gMKaqQZ6jG0ZGxnPDsj2uhV8wjNKWI_VvGdJAsb0BQJk4-FUGypzrMRX6InRyNz53qYSHGbxjYSC3Yl9df-QM4pGVZ4kiBFSrY7IXvqvIUEJu8zjXFDSbTA
2024-10-23 23:35:31 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 23 Oct 2024 23:35:31 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 23:35:31 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-23 23:35:31 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	55477	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:31 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:31 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 33373380-a01e-003d-4cf5-2498d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233531Z-15b8d89586f42m673h1quuee4s000000026000000000q217 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:31 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	55478	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:31 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:31 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:31 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233531Z-16849878b789m94j7902zfvfr000000006sg00000000f6sk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:31 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	55479	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:31 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:31 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 1290ce53-d01e-002b-7905-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233531Z-16849878b787c9z7hb8u9yysp000000006zg00000000cw2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:31 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	55480	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:31 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:32 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 26284338-e01e-0052-664d-22d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233531Z-16849878b788tnsxzb2smucwdc00000006xg00000000ds9u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	55481	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:31 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:32 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:31 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 131e52ce-d01e-002b-553b-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233531Z-16849878b78z5q7jpbgf6e9mcw00000006wg00000000s5tw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:32 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	55484	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:32 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:32 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: e79f0600-d01e-00ad-4ef2-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233532Z-15b8d89586f4zwgbz365q03b0c0000000dng00000000h31t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:32 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	55482	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:32 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 759c8b5d-301e-003f-27f2-24266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233532Z-15b8d89586f6nn8zquf2vw6t540000000440000000002kqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	55483	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:32 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:32 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233532Z-16849878b78fmrkt2ukpvh9wh400000006x0000000006z9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:32 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	55486	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:32 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:32 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: b13276b3-c01e-00a2-52fc-242327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233532Z-r197bdfb6b4lbgfqwkqbrm672s00000000p000000000bk61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:33 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	55485	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:32 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 03f0a5af-d01e-007a-76f2-24f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233532Z-r197bdfb6b4h2vctng0a0nubg80000000a1g00000000964r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:33 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	55487	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:33 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:33 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 221e1266-901e-0016-4cfc-24efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233533Z-r197bdfb6b4cz6xrsdncwtgzd40000000nqg000000004h3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:33 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	55488	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:33 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:33 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2d861f62-501e-0064-3bf5-241f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233533Z-15b8d89586fvk4kmwqg9fgbkn800000002c000000000nkch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:33 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	55489	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:33 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:33 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: be98e2c6-601e-0001-2b87-21faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233533Z-16849878b785f8wh85a0w3ennn00000006w000000000aspn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:33 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	55491	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:33 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:33 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:33 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 44f017bc-601e-000d-6df3-242618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233533Z-15b8d89586ff5l62quxsfe8ugg0000000d6g000000005bnu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:35:33 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	55490	13.107.246.45	443	3272	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:33 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:33 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 07f9ef03-d01e-0014-614d-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233533Z-16849878b78s2lqfdex4tmpp7800000006y000000000acg0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:33 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	55492	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:34 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:34 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 40ca5ebb-901e-0048-7827-21b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233534Z-16849878b785jsrm4477mv3ezn00000006y0000000002skh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:34 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	55493	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:34 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:34 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f6d2fe15-801e-007b-74f2-21e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233534Z-16849878b782h9tt5z2wa5rfxg00000006ug00000000g4u3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:34 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	55495	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:34 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:34 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 2d77a7fe-501e-0064-68ef-241f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233534Z-15b8d89586fst84k5f3z220tec0000000dhg00000000cske x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:34 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	55494	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:34 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:34 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: a706a42d-501e-008c-4ef2-24cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233534Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000b9000000000a5fs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:34 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	55496	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:34 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:34 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233534Z-16849878b78dkr6tqerbnpg1zc00000006ug00000000rtnn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:34 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	55498	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:35 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:35 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f2a27b04-801e-0047-6ef4-247265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233535Z-r197bdfb6b4ld6jc5asqwvvz0w00000000t000000000mmn2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:35 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	55499	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:35 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:35 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:35 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233535Z-16849878b78s2lqfdex4tmpp7800000006x000000000f21b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:35 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	55501	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:35 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 94ed83ec-801e-0083-4bf2-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233535Z-15b8d89586frzkk2umu6w8qnt80000000dd0000000009uma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	55500	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:35 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:35 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 628e7349-b01e-003d-63fd-24d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233535Z-15b8d89586fzhrwgk23ex2bvhw00000000xg00000000d47d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:35 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	55502	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:35 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:35 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 33ade019-101e-0028-30f5-248f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233535Z-15b8d89586f8l5961kfst8fpb000000008cg00000000gfp0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:35 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	55503	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:36 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 40a513cc-e01e-0051-0ef3-2484b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233536Z-r197bdfb6b4cz6xrsdncwtgzd40000000ngg00000000me4x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	55504	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:36 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:36 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7fcc546d-701e-001e-80a3-21f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233536Z-16849878b787sbpl0sv29sm89s0000000730000000000d9q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:36 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	55505	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:36 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1d9ab00d-a01e-0002-3af4-245074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233536Z-r197bdfb6b49k6rsrbz098tg80000000041g00000000epa4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	55506	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:36 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 3892b43a-301e-0051-71f4-2438bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233536Z-15b8d89586fqj7k5uht6e8nnew0000000d3g0000000099f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	55507	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:36 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:36 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 6a252cba-901e-0029-59f2-24274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233536Z-r197bdfb6b4kzncf21qcaynxz8000000012000000000bnxm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:36 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	55508	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:37 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:37 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: acb2ef9b-e01e-001f-1f33-221633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233537Z-16849878b78rjhv97f3nhawr7s00000006vg00000000cmmp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:37 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	55509	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:37 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:37 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 7cfbc72c-d01e-0082-6d55-22e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233537Z-16849878b78q4pnrt955f8nkx800000006vg0000000046c1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:37 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	55510	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:37 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:37 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 217788b5-401e-0016-11a2-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233537Z-16849878b78ngdnlw4w0762cms00000006y000000000kryg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:37 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	55511	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:37 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:37 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ee7a308c-c01e-00a1-620b-227e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233537Z-16849878b78dghrpt8v731n7r400000006qg00000000scan x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:37 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	55512	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:37 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:37 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 6a9fe61e-e01e-001f-0a16-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233537Z-r197bdfb6b4sn8wg20e97vn7ps0000000ndg00000000eqbh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:37 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	55515	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:38 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:38 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: c0884099-101e-0046-3a40-2291b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233538Z-16849878b785g992cz2s9gk35c00000006vg00000000n58w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:38 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	55513	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:38 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:38 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 7a3803bc-a01e-0021-4af4-24814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233538Z-15b8d89586flspj6y6m5fk442w0000000400000000002w02 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	55516	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:38 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:38 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: e7a8c7ed-d01e-00ad-4ff5-24e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233538Z-r197bdfb6b4rkc6mhwyt3e61pc00000000vg00000000aa08 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:35:38 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	55514	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:38 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:38 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 43134ec5-e01e-003c-4115-25c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233538Z-r197bdfb6b4kzncf21qcaynxz8000000014g000000004fpf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:38 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	55517	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:38 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:38 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: f2361012-b01e-003e-18e4-218e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233538Z-16849878b78mhkkf6kbvry07q000000006s000000000hggz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:38 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	55518	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:39 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233539Z-16849878b78k8q5pxkgux3mbgg00000006xg000000004qty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:39 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	55519	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:39 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:39 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: fa910cef-e01e-003c-72dd-21c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233539Z-16849878b786wvrz321uz1cknn00000006ug00000000um83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:39 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	55520	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:39 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:39 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 931f542e-301e-000c-75f2-21323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233539Z-16849878b787c9z7hb8u9yysp0000000072g000000001zn3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:39 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	55521	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:39 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:39 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: a2e914b6-401e-0029-5fce-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233539Z-16849878b787c9z7hb8u9yysp000000006vg00000000yxhb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:39 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	55523	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:39 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:39 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 135f94f0-d01e-002b-2a55-2225fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233539Z-16849878b78p4hmjy4vha5ddqw00000006t000000000e053 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:39 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	55524	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:39 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233540Z-16849878b788tnsxzb2smucwdc000000070g000000001zh9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	55527	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:40 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:40 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233540Z-16849878b78hz7zj8u0h2zng140000000730000000000fxg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	55525	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:40 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 39b78571-501e-0016-43f4-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233540Z-15b8d89586fqckbz0ssbuzzp1n000000018000000000nc30 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	55526	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:40 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:40 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: bd3356e8-b01e-0002-6afb-241b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233540Z-15b8d89586ff5l62quxsfe8ugg0000000d4000000000cw2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:40 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	55528	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:40 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:40 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: f906b5ab-001e-0079-7ff4-2412e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233540Z-r197bdfb6b4rkc6mhwyt3e61pc00000000rg00000000sde1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:40 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	55529	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:40 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:41 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:40 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 5a53efb7-001e-0034-5556-23dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233540Z-r197bdfb6b4r9fwfbdwymmgex800000000g000000000dnpk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:41 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	55530	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:40 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:40 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: e5d3cb58-101e-0046-3bf3-2491b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233540Z-r197bdfb6b4ld6jc5asqwvvz0w00000000ug00000000f8ac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:41 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	55532	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:40 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:41 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:40 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 0eea03f1-d01e-0066-098a-21ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233540Z-16849878b78fmrkt2ukpvh9wh400000006t000000000rp5d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:41 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	55531	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:40 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:40 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: f09c1d25-d01e-0082-52f3-21e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233540Z-16849878b78q4pnrt955f8nkx800000006p000000000xm6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:41 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	55533	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:41 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:41 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:41 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: d9905de8-801e-0083-31a7-24f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233541Z-15b8d89586f2hk28h0h6zye26c00000000qg000000007kqv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:41 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	55534	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:41 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:41 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 273a8d1a-001e-0034-0d8c-21dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233541Z-16849878b78p4hmjy4vha5ddqw00000006r000000000qsnz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:41 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	55535	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:41 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:41 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 7edb8da2-f01e-0099-33f3-249171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233541Z-15b8d89586fzhrwgk23ex2bvhw0000000110000000002a6b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:41 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	55537	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:41 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:41 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 999b9529-701e-001e-53f4-24f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233541Z-r197bdfb6b4rkc6mhwyt3e61pc00000000s000000000rbwy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:41 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	55536	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:41 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:41 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:41 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9f3a3312-201e-0096-7bbe-20ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233541Z-16849878b78dkr6tqerbnpg1zc00000006yg000000008xqe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:41 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	55538	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:42 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:42 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:42 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233542Z-16849878b78dghrpt8v731n7r400000006u00000000093yu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:42 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	55541	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:42 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:42 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6129b0de-c01e-00a1-59fb-247e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233542Z-15b8d89586fst84k5f3z220tec0000000dh000000000fzfd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:42 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	55539	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:42 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:42 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e3e5e386-001e-0014-4ffc-245151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233542Z-r197bdfb6b49q495mwyebb3r6s00000009tg00000000r7fq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:42 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	55540	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:42 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:42 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 2abba737-001e-0066-7df4-24561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233542Z-15b8d89586fmhkw4gksnr1w3ds0000000dmg000000006dmf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:42 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	55542	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:42 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:42 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:42 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 53594826-c01e-0082-6cf3-24af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233542Z-r197bdfb6b4rt57kw3q0f43mqg0000000b3000000000rwy2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:42 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	55543	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:43 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:43 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 082c7638-801e-0067-65f2-24fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233543Z-15b8d89586fnsf5zm1ryrxu0bc00000002eg00000000598e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:43 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	55546	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:43 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:43 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 333c19fd-801e-00ac-16e3-21fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233543Z-16849878b78c5zx4gw8tcga1b400000006tg00000000auy0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:43 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	55544	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:43 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:43 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:43 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 4faef820-a01e-0053-6a4e-228603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233543Z-16849878b78lhh9t0fb3392enw00000006vg000000003ugv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:35:43 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	55545	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:43 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:43 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 7898325b-901e-00ac-11c9-20b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233543Z-16849878b78q4pnrt955f8nkx800000006qg00000000r6c6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:43 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	55547	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:43 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:43 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:43 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 62859660-b01e-003d-3dfb-24d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233543Z-15b8d89586ffsjj9qb0gmb1stn00000002e0000000006bg0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:43 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	55548	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:44 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:44 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:44 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 31e4fe8c-301e-0033-38f2-21fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233544Z-16849878b78ngdnlw4w0762cms00000006vg00000000xacu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:44 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	55550	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:44 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:44 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:44 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 39bddf94-501e-0016-02f5-24181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233544Z-r197bdfb6b4cz6xrsdncwtgzd40000000nh000000000haa8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:44 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	55551	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:44 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:44 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:44 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: ce71dc49-401e-0035-7698-2582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233544Z-15b8d89586ffsjj9qb0gmb1stn00000002b000000000fnym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:44 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	55552	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:44 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:44 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:44 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 9aa7f8dd-901e-0048-781b-24b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233544Z-r197bdfb6b4lbgfqwkqbrm672s00000000mg00000000gy8x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:44 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	55549	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:44 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:44 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:44 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: a37da697-e01e-0071-35f2-2408e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233544Z-15b8d89586f42m673h1quuee4s00000002cg0000000007h6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:44 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	55553	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:45 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:45 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:45 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 53cb03fc-601e-0084-2ff2-246b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233545Z-r197bdfb6b4r9fwfbdwymmgex800000000p00000000072g5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:35:45 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	55554	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:45 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:45 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 62bbcfe8-a01e-0032-2ffc-241949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233545Z-r197bdfb6b4rkc6mhwyt3e61pc00000000r000000000xc4h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:45 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	55556	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:45 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:45 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 094c1a0f-c01e-0066-77f2-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233545Z-15b8d89586flspj6y6m5fk442w00000003xg00000000asa7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:45 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	55555	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:45 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:45 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:45 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0c5aa6f6-c01e-000b-5d92-25e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233545Z-15b8d89586fmhkw4gksnr1w3ds0000000deg00000000nzh9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:35:45 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	55557	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:45 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:45 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233545Z-16849878b786vsxz21496wc2qn00000006vg00000000wdqu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:45 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	55558	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:45 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:46 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:46 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 97ea84b8-d01e-005a-0430-217fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233546Z-16849878b785jsrm4477mv3ezn00000006v000000000d1sy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:46 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	55559	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:46 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:46 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:46 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 5342d47f-d01e-0028-2f83-217896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233546Z-16849878b7842t5ke0k7mzbt3c00000006qg00000000fq3z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:46 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	55561	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:46 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:46 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:46 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: fbe9264b-c01e-0046-04f3-242db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233546Z-r197bdfb6b49q495mwyebb3r6s00000009w000000000ff7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:35:46 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	55560	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:46 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:46 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:46 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a7868e79-001e-0049-77f2-245bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233546Z-r197bdfb6b4rkc6mhwyt3e61pc00000000x0000000005sq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:46 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	55562	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:46 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:46 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:46 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: b9c92f65-401e-0016-1c27-2153e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233546Z-16849878b785g992cz2s9gk35c00000006xg00000000b6ty x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:46 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	55563	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:46 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:46 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:46 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9f7c1011-d01e-0065-1a3b-22b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233546Z-16849878b78lhh9t0fb3392enw00000006rg00000000kef6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:46 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	55564	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:47 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:47 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:47 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f5f98d55-001e-0049-58e4-215bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233547Z-16849878b78jfqwd1dsrhqg3aw00000006y000000000knfh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:47 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	55565	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:47 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:47 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:47 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c944a0c5-101e-005a-7340-22882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233547Z-16849878b78jfqwd1dsrhqg3aw0000000730000000000du3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:47 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	55566	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:47 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:47 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:47 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 77e1448d-001e-0034-40f3-24dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233547Z-15b8d89586flzzks5bs37v2b9000000002cg00000000k86k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:35:47 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	55567	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:47 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:47 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: baa41b4f-401e-00ac-2c28-210a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233547Z-16849878b78lhh9t0fb3392enw00000006u0000000008x00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:47 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	55568	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:47 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:47 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: e1e0bfc6-201e-006e-0e0b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233547Z-16849878b78lhh9t0fb3392enw00000006r000000000nxet x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:47 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	55569	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:48 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:48 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 4e9f4159-f01e-005d-3228-2113ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233548Z-16849878b78lhh9t0fb3392enw00000006w00000000028h3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:48 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	55570	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:48 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:48 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: a7149c48-d01e-0065-3117-24b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233548Z-r197bdfb6b49k6rsrbz098tg80000000041000000000g7x5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:48 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	55572	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:48 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:48 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: af8bbd6e-001e-00a2-3df5-24d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233548Z-15b8d89586fqckbz0ssbuzzp1n000000018000000000ncbt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:48 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	55571	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:48 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:48 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 7d1b5409-301e-0052-16f3-2465d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233548Z-r197bdfb6b4kkrkjudg185sarw00000000x000000000n10h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:48 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	55573	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:48 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:48 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 4481152a-601e-0001-4b55-22faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233548Z-16849878b786vsxz21496wc2qn00000006wg00000000rh54 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:48 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	55574	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:49 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:49 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:49 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: b053902c-001e-0028-05ae-24c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233549Z-15b8d89586fvk4kmwqg9fgbkn800000002dg00000000f20c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:49 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	55575	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:49 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:49 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:49 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6e18d5c3-a01e-00ab-48f4-249106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233549Z-r197bdfb6b4h2vctng0a0nubg80000000a30000000004h01 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 23:35:49 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	55576	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:49 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:49 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 8367d3cb-101e-0034-13f5-2496ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233549Z-15b8d89586fdmfsg1u7xrpfws000000002gg000000005vvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:49 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	55577	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:49 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:49 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: af80e16d-001e-00a2-6cf2-24d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233549Z-15b8d89586fzhrwgk23ex2bvhw00000000xg00000000d507 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:49 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	55578	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:49 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:49 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3d4cb055-601e-0097-01e5-21f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233549Z-16849878b78plcdqu15wsb886400000006ug00000000g691 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:49 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	55579	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:49 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:49 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 53cea195-601e-0084-75f3-246b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233549Z-r197bdfb6b4kkrkjudg185sarw000000012g0000000007p3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:50 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	55581	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:49 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:50 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 03ef3c5b-d01e-007a-4ff2-24f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233550Z-15b8d89586fvk4kmwqg9fgbkn800000002h0000000004u7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:50 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	55580	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 23:35:49 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 23:35:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 23:35:49 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: ce674b06-f01e-0052-7d0b-229224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T233549Z-16849878b78plcdqu15wsb886400000006r000000000xbfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 23:35:50 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Target ID:	0
Start time:	19:34:30
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:34:32
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1948,i,14114869393493894736,14263863744638694507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:34:35
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	19:34:54
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5524 --field-trial-handle=1948,i,14114869393493894736,14263863744638694507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	19:34:54
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5436 --field-trial-handle=1948,i,14114869393493894736,14263863744638694507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Windows Analysis Report
https://chat.google.com/dm/vihz_MAAAAE/KpEHZPfP5fA/KpEHZPfP5fA?cls=10