Edit tour

Windows Analysis Report
https://outlook.office365.com/owa/Digital2024@mmsgau.onmicrosoft.com/groupsubscriΡtion.ashx?realm=mmsgau.onmicrosoft.com&source=WelcomeEmail&sourceversion=V3&action=conversations&subaction=gotogroup

Overview

General Information

Sample URL:	https://outlook.office365.com/owa/Digital2024@mmsgau.onmicrosoft.com/groupsubscriΡtion.ashx?realm=mmsgau.onmicrosoft.com&source=WelcomeEmail&sourceversion=V3&action=conversations&subaction=gotogroup
Analysis ID:	1543497
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6096 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2324,i,13970472326723440885,11097334602539108024,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6400 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://outlook.office365.com/owa/Digital2024@mmsgau.onmicrosoft.com/groupsubscription.ashx?realm=mmsgau.onmicrosoft.com&source=WelcomeEmail&sourceversion=V3&action=conversations&subaction=gotogroup" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc&sso_reload=true	HTTP Parser: Title: Sign in to Outlook does not match URL

Source: https://outlook.office365.com/owa/Digital2024@mmsgau.onmicrosoft.com/groupsubscription.ashx?realm=mmsgau.onmicrosoft.com&source=WelcomeEmail&sourceversion=V3&action=conversations&subaction=gotogroup

Sample URL: PII: Digital2024@mmsgau.onmicrosoft.com

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc&sso_reload=true

HTTP Parser: <input type="password" .../> found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc&sso_reload=true	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:52438 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:52368 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /owa/Digital2024@mmsgau.onmicrosoft.com/groupsubscription.ashx?realm=mmsgau.onmicrosoft.com&source=WelcomeEmail&sourceversion=V3&action=conversations&subaction=gotogroup HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_QLF_8apNRJD3OCol8jwtxw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_QLF_8apNRJD3OCol8jwtxw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=0543886A2E51424FB3DAD8CF6E106EA9; OIDC=1; domainName=mmsgau.onmicrosoft.com; OpenIdConnect.nonce.v3.Ru1a6v59Df9eqHa1xodKA8OUOq8uhYfvE0KAf_aV2eU=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /81d6b03a-bocptwwhbyyvw9ygnh-lj9smgsjc671bhchkes1kg-q/logintenantbranding/0/illustration?ts=636942574602374519 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /81d6b03a-bocptwwhbyyvw9ygnh-lj9smgsjc671bhchkes1kg-q/logintenantbranding/0/bannerlogo?ts=636942579048543754 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /81d6b03a-bocptwwhbyyvw9ygnh-lj9smgsjc671bhchkes1kg-q/logintenantbranding/0/bannerlogo?ts=636942579048543754 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /81d6b03a-bocptwwhbyyvw9ygnh-lj9smgsjc671bhchkes1kg-q/logintenantbranding/0/illustration?ts=636942574602374519 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: outlook.office365.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: r4.res.office365.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauthimages.net
Source: global traffic	DNS traffic detected: DNS query: autologon.microsoftazuread-sso.com

Source: chromecache_83.2.dr, chromecache_81.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_90.2.dr	String found in binary or memory: http://github.com/jquery/globalize
Source: chromecache_95.2.dr, chromecache_94.2.dr, chromecache_91.2.dr, chromecache_68.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_95.2.dr, chromecache_94.2.dr, chromecache_91.2.dr, chromecache_68.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_84.2.dr, chromecache_73.2.dr, chromecache_83.2.dr, chromecache_95.2.dr, chromecache_96.2.dr, chromecache_94.2.dr, chromecache_72.2.dr, chromecache_81.2.dr, chromecache_91.2.dr, chromecache_68.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_64.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_64.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 52461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 52415 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 52393 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 52427 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 52370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52449 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 52416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 52379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 52462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52406
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52407
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52404
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52405
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52408
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52409
Source: unknown	Network traffic detected: HTTP traffic on port 52453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52402
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52403
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52400
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52401
Source: unknown	Network traffic detected: HTTP traffic on port 52372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52417
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52418
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52415
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52416
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52419
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52410
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52413
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52414
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52411
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52412
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52428
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52429
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52426
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52427
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 52407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52420
Source: unknown	Network traffic detected: HTTP traffic on port 52430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52421
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52424
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52425
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52422
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52423
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52395 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52373
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52370
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52376
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52377
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52375
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52378
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52379
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52380
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52383
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52384
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52381
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52382
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52398 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52387
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52388
Source: unknown	Network traffic detected: HTTP traffic on port 52455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52385
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52386
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52390
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52391
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52394
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52395
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52392
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52393
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52439
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52437
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52438
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52397 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52432
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52430
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52435
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52436
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52433
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52434
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52449
Source: unknown	Network traffic detected: HTTP traffic on port 52411 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52441
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52446
Source: unknown	Network traffic detected: HTTP traffic on port 52457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52447
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52444
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52445
Source: unknown	Network traffic detected: HTTP traffic on port 52386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52450
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52459
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52453
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52454
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52451
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52457
Source: unknown	Network traffic detected: HTTP traffic on port 52456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52458
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52455
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52456
Source: unknown	Network traffic detected: HTTP traffic on port 52400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52460
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52461
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52464
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52462
Source: unknown	Network traffic detected: HTTP traffic on port 52385 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52463
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52378 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52435 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52447 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52401 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52413 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52398
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52399
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52396
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52397
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52425 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 52402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 52436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52437 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52459 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52403 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:52438 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@18/56@24/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2324,i,13970472326723440885,11097334602539108024,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://outlook.office365.com/owa/Digital2024@mmsgau.onmicrosoft.com/groupsubscription.ashx?realm=mmsgau.onmicrosoft.com&source=WelcomeEmail&sourceversion=V3&action=conversations&subaction=gotogroup"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2324,i,13970472326723440885,11097334602539108024,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://login.microsoftonline.com	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
http://knockoutjs.com/	0%	URL Reputation	safe
http://feross.org	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_QLF_8apNRJD3OCol8jwtxw2.js	0%	Virustotal		Browse
http://github.com/jquery/globalize	0%	Virustotal		Browse
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	0%	Virustotal		Browse
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.74.196	true	false	unknown
HHN-efz.ms-acdc.office.com	52.98.152.194	true	false	unknown
FRA-efz.ms-acdc.office.com	40.99.149.98	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
autologon.microsoftazuread-sso.com	40.126.32.134	true	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
r4.res.office365.com	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
outlook.office365.com	unknown	unknown	false	unknown
aadcdn.msftauthimages.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	false	0%, Virustotal, Browse	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_QLF_8apNRJD3OCol8jwtxw2.js	false	0%, Virustotal, Browse	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false	0%, Virustotal, Browse	unknown
https://aadcdn.msftauthimages.net/81d6b03a-bocptwwhbyyvw9ygnh-lj9smgsjc671bhchkes1kg-q/logintenantbranding/0/illustration?ts=636942574602374519	false		unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css	false		unknown
https://outlook.office365.com/owa/prefetch.aspx	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false		unknown
https://aadcdn.msftauthimages.net/81d6b03a-bocptwwhbyyvw9ygnh-lj9smgsjc671bhchkes1kg-q/logintenantbranding/0/bannerlogo?ts=636942579048543754	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js	false		unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://github.com/jquery/globalize	chromecache_90.2.dr	false	0%, Virustotal, Browse	unknown
https://login.microsoftonline.com	chromecache_64.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_95.2.dr, chromecache_94.2.dr, chromecache_91.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
http://knockoutjs.com/	chromecache_95.2.dr, chromecache_94.2.dr, chromecache_91.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_84.2.dr, chromecache_73.2.dr, chromecache_83.2.dr, chromecache_95.2.dr, chromecache_96.2.dr, chromecache_94.2.dr, chromecache_72.2.dr, chromecache_81.2.dr, chromecache_91.2.dr, chromecache_68.2.dr	false		unknown
https://login.windows-ppe.net	chromecache_64.2.dr	false		unknown
http://feross.org	chromecache_83.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.98.152.194	HHN-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
40.99.149.98	FRA-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
142.250.74.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1543497
Start date and time:	2024-10-28 02:05:23 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://outlook.office365.com/owa/Digital2024@mmsgau.onmicrosoft.com/groupsubscriΡtion.ashx?realm=mmsgau.onmicrosoft.com&source=WelcomeEmail&sourceversion=V3&action=conversations&subaction=gotogroup
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@18/56@24/9

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 142.250.185.110, 64.233.167.84, 34.104.35.123, 40.126.32.134, 40.126.32.136, 40.126.32.76, 40.126.32.68, 40.126.32.138, 20.190.160.20, 20.190.160.17, 40.126.32.140, 172.202.163.200, 199.232.210.172, 20.3.187.198, 192.229.221.95, 2.19.126.89, 2.19.126.84, 40.126.31.73, 20.190.159.73, 40.126.31.67, 20.190.159.64, 20.190.159.2, 20.190.159.71, 20.190.159.68, 40.126.31.71, 23.38.98.104, 23.38.98.96, 216.58.206.42, 142.250.185.234, 142.250.186.170, 142.250.185.170, 142.250.186.74, 142.250.186.106, 142.250.186.42, 172.217.18.10, 142.250.185.106, 142.250.181.234, 216.58.212.170, 142.250.185.138, 142.250.186.138, 172.217.16.202, 142.250.185.202, 142.250.184.202, 40.126.31.69, 20.190.159.0, 20.190.159.23, 20.190.159.4, 172.217.18.3
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, ak.privatelink.msidentity.com, a1894.dscb.akamai.net, clients2.google.com, ocsp.digicert.com, login.live.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, login.mso.msidentity.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.tm.ak.prd.aadg.trafficmanager.net, e40491.dscg.akamaiedge.net, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, aadcdnoriginwus2.azureedge.net, aadcdn-msft.azureedge.net, otelrules.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, ctldl.windowsupdate.com, aadcdn-msft.afd.azureedge.net, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, nel.mea
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113378
Entropy (8bit):	5.285066693137765
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmQhSeC1Jzc6VUW3:xkXhp6VU0
MD5:	9C837C2B6C9C441656C3C64BE6FC6401
SHA1:	D44AA83093C4109DDD8FFAEA60755F05D1BFE7D3
SHA-256:	68C2994E21A564345EB3B4091DD2334C9CBDDB0AECDA45EE963C6DE2E1629B93
SHA-512:	AF04835BCC621FE1793C4661FDB03EDEA16219BAA77F1198AA419F771B6B3DCDAC3DA92676568C207022251483AB79C75AB6DF2CE94924748FF9CEBF64AFF5A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 280 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4075
Entropy (8bit):	7.810220421048297
Encrypted:	false
SSDEEP:	96:fPiYR2MtSj3iyLtq4x/PRO40N2WZaoD6LCNr7ecRIx:frftSWyLY4x/PRO40gWYoDlNr7H0
MD5:	B78552E6413D14868B0402C0CA513E3A
SHA1:	7AD4E9123F4918C4D92532D752E6FD8B1D747D55
SHA-256:	AD65385D44EAAC33D897BD7CA6FC01F7BD604EDFDCFA53A4F35C50F6C11C7DB6
SHA-512:	6B5981A3E70B52449B667943FF1AE365D6EDCA4F57258A77427A714CAFC396771F5123EAC4067EAEEB72E237304CC770254FEB4523DAEEF8E745C69E69962B77
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauthimages.net/81d6b03a-bocptwwhbyyvw9ygnh-lj9smgsjc671bhchkes1kg-q/logintenantbranding/0/bannerlogo?ts=636942579048543754
Preview:	.PNG........IHDR.......<............tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmpMM:InstanceID="xmp.iid:0D00546673B111E9A68C86876F55B700" xmpMM:DocumentID="xmp.did:50006AEE73B111E9A68C86876F55B700"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0D00546473B111E9A68C86876F55B700" stRef:documentID="xmp.did:0D00546573B111E9A68C86876F55B700"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.od....YIDATx..]..VU.....R#.-.8F.H..Q+..W....h.p...*..2.... ..4S36.(...%Ay.^..I(.+.4.l.._)O.......;t...u.....f

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	downloaded
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	dropped
Size (bytes):	113769
Entropy (8bit):	5.492540089333064
Encrypted:	false
SSDEEP:	1536:RS8gIRPY0+r5qnWisLTfM6tQSqLXCIIgbgZ1uXt1EN5eAfGqOD:vgDTMnWRwvDIgb0q7Eb9u
MD5:	C6C029BA88D52E5312FEC69603A00340
SHA1:	079011F6F0662C11AE907C773EFE8E0C9338EAD0
SHA-256:	DDD0BB1C19B3D2D045BFCDE85D2020BBA57854C887A6691B66DBA3DA1BB3AFBE
SHA-512:	7DF09CD949A43D53D62D9013718158966508DEC2338491FFB38DC33D2EB85FF5C699792AE578975DA0E4F03CC7EA03774624208D06924EEA4C2EAC92E6E22C60
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1373:function(e,t,

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113769
Entropy (8bit):	5.492540089333064
Encrypted:	false
SSDEEP:	1536:RS8gIRPY0+r5qnWisLTfM6tQSqLXCIIgbgZ1uXt1EN5eAfGqOD:vgDTMnWRwvDIgb0q7Eb9u
MD5:	C6C029BA88D52E5312FEC69603A00340
SHA1:	079011F6F0662C11AE907C773EFE8E0C9338EAD0
SHA-256:	DDD0BB1C19B3D2D045BFCDE85D2020BBA57854C887A6691B66DBA3DA1BB3AFBE
SHA-512:	7DF09CD949A43D53D62D9013718158966508DEC2338491FFB38DC33D2EB85FF5C699792AE578975DA0E4F03CC7EA03774624208D06924EEA4C2EAC92E6E22C60
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1373:function(e,t,

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	660449
Entropy (8bit):	5.4121922690110535
Encrypted:	false
SSDEEP:	12288:3PUKyvwjOOvwZ1ARuxntuicBh8hS11dsUA:yvjZ+/pIUA
MD5:	D9E3D2CE0228D2A5079478AAE5759698
SHA1:	412F45951C6AEDA5F3DF2C52533171FC7BDD5961
SHA-256:	7041D585609800051E4F451792AEC2B8BD06A4F2D29ED6F5AD8841AAE5107502
SHA-512:	06700C65BEF4002EBFBFF9D856C12E8D71F408BACA2D2103DDE1C28319B6BD3859FA9D289D8AEB6DD484E802040F6EE537F31F97B4B60A6B120A6882C992207A
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8093.27/scripts/boot.worldwide.3.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.3.mouse.js'] = (new Date()).getTime();..;_n.a.jR=function(n){return n.dS()};_n.a.jZ=function(n){return n.eh()};_n.a.jP=function(n){return n.cC()};_n.a.jQ=function(n){return n.ca()};_n.a.hZ=function(n){return n.dO};_n.a.jU=function(n){return n.ed()};_n.a.jT=function(n){return n.ea()};_n.a.kb=function(n){return n.ej()};_n.a.hM=function(n){return 300};_n.a.fh=function(n){return n.V};_n.a.jV=function(n){return n.bI()};_n.a.ie=function(n){return n.mh()};_n.a.km=function(n){return n.bl()};_n.a.ka=function(n){return n.ei()};_n.a.ko=function(n){return n.cV()};_n.a.eX=function(n){return _y.E.isInstanceOfType(n)?n.y:null};_n.a.jN=function(n){return n.c()};_n.a.gm=function(n){return n.b()};_n.a.jM=function(n){return n.b()};_n.a.ib=function(n){return n.jM()};_n.a.iq=function(n){return n.bG};_n.a.iX=function(n){return _n.V.isInstanceOfType(n)?n

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (994), with no line terminators
Category:	downloaded
Size (bytes):	994
Entropy (8bit):	4.934955158256183
Encrypted:	false
SSDEEP:	12:U8Chx3fpler8DDMv1+I+zpcuVkicq32EXgBA5e2KMLT:JC3G0z1Ddf2NGe2KG
MD5:	E2110B813F02736A4726197271108119
SHA1:	D7AC10CC425A7B67BF16DDA0AAEF1FEB00A79857
SHA-256:	6D1BE7ED96DD494447F348986317FAF64728CCF788BE551F2A621B31DDC929AC
SHA-512:	E79CF6DB777D62690DB9C975B5494085C82E771936DB614AF9C75DB7CE4B6CA0A224B7DFB858437EF1E33C6026D772BE9DBBB064828DB382A4703CB34ECEF1CF
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8093.27/resources/images/0/sprite1.mouse.css
Preview:	.image-loading_blackbg-gif{background:url('loading_blackbg.gif');width:16px;height:16px}.image-loading_whitebg-gif{background:url('loading_whitebg.gif');width:16px;height:16px}.image-thinking16_blue-gif{background:url('thinking16_blue.gif');width:16px;height:16px}.image-thinking16_grey-gif{background:url('thinking16_grey.gif');width:16px;height:16px}.image-thinking16_white-gif{background:url('thinking16_white.gif');width:16px;height:16px}.image-thinking24-gif{background:url('thinking24.gif');width:24px;height:24px}.image-thinking32_blue-gif{background:url('thinking32_blue.gif');width:32px;height:32px}.image-thinking32_grey-gif{background:url('thinking32_grey.gif');width:32px;height:32px}.image-thinking32_white-gif{background:url('thinking32_white.gif');width:32px;height:32px}.image-clear1x1-gif{width:1px;height:1px;background:url('sprite1.mouse.png') -0 -0}.csimg{padding:0;border:none;background-repeat:no-repeat;-webkit-touch-callout:none}span.csimg{-ms-high-contrast-adjust:none}

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	269744
Entropy (8bit):	7.97637072594837
Encrypted:	false
SSDEEP:	6144:ujeC/4dCTU4QE7BmgMrQDa+oFSj9MAuFqcIQF4RT9PawAFAIl:ujeC/yAvbcU4SjkMCYHg7
MD5:	191330C4972B64B5582DB7367404EAEB
SHA1:	87A9FBC315858A987911BA9438DCE939B2870BED
SHA-256:	5934BD9048AD760CCBA5235084A3C01C9A332D17963D669CEDE8B3F7A91A6E0F
SHA-512:	A7E8E6FE9E372048EA2518D19ECD1DA42E44E242A2119D195BB523C6E607307969AD64468B29EB665B35F9EC3E367CFB715A888FF0BE876780DB0B89973E81D7
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......U......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:5db5992f-8b37-4af2-b488-a8fe0fb7ef43" xmpMM:DocumentID="xmp.did:C5697EAA73AF11E9A68C86876F55B700" xmpMM:InstanceID="xmp.iid:C5697EA973AF11E9A68C86876F55B700" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f31f4fb3-e924-442f-9ee5-5737b77c8d8e" stRef:documentID="xmp.did:5db5992f-8b37-4af2-b488-a8fe0fb7ef43"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32009)
Category:	dropped
Size (bytes):	57443
Entropy (8bit):	5.372940573746363
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3D7ym+d/Px25+1wtvGixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJz7ym+d/Po5+1wtvGiJig/Ml
MD5:	D580777BB3A28B94F6F1D18EE17AEDA3
SHA1:	E78833A2DB1AA97DA3F4A1994E6AF1F0D74D7CC7
SHA-256:	81188E8A76162C79DB4A5C10AC933C9E874C5B9EAE10E47956AD9DF704E01B28
SHA-512:	E3F5FFE3E7E54A7D640DF3BC06D336C9F936635D2594159B3EA5EDAEFBA6D6774060A532E0CBE0664FDC65806BD53E9BFC19C11F7946A5E157A9EC935C564378
Malicious:	false
Reputation:	low
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14782)
Category:	downloaded
Size (bytes):	15755
Entropy (8bit):	5.366543080044668
Encrypted:	false
SSDEEP:	384:DveX/4OSgcn2ZU2ZfeXOh+rF3X1qDZD4zfXdv79HU:q/9i57hU
MD5:	630831903F4BA9060856520624E34CFC
SHA1:	36DC15B9CCC3FC8EF627354BF55EF44EBD10E203
SHA-256:	BC6804D058D5BD5B24FC04E479FC8973BEF5D3EFEAFAA9C19C60A009BF0FAC0B
SHA-512:	1B0759972BBAB0B1A11D54849051E6782600B74FADB1CAF1BD58D214F484E35154907CA7F396EDB1C81A7CDC6F264D138267FB58FD89E1BA3A4D67366EE7E8B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{519:function(e,n,s

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	662286
Entropy (8bit):	5.315860951951661
Encrypted:	false
SSDEEP:	12288:YfmmzLJTD/JilMGk4hBR310FaHHxpJy7qVfb4cSPo:Yfm+T7US7SR310FaHHTJy7qJ4rPo
MD5:	12204899D75FC019689A92ED57559B94
SHA1:	CCF6271C6565495B18C1CED2F7273D5875DBFB1F
SHA-256:	39DAFD5ACA286717D9515F24CF9BE0C594DFD1DDF746E6973B1CE5DE8B2DD21B
SHA-512:	AA397E6ABD4C54538E42CCEDA8E3AA64ACE76E50B231499C20E88CF09270AECD704565BC9BD3B27D90429965A0233F99F27697F66829734FF02511BD096CF030
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8093.27/scripts/boot.worldwide.2.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.2.mouse.js'] = (new Date()).getTime();.._y.lC=function(){};_y.lC.registerInterface("_y.lC");_y.jw=function(){};_y.jw.registerInterface("_y.jw");_y.lA=function(){};_y.lA.registerInterface("_y.lA");var IDelayedSendEvent=function(){};IDelayedSendEvent.registerInterface("IDelayedSendEvent");var IIsShowingComposeInReadingPaneEvent=function(){};IIsShowingComposeInReadingPaneEvent.registerInterface("IIsShowingComposeInReadingPaneEvent");var ISendFailedO365Event=function(){};ISendFailedO365Event.registerInterface("ISendFailedO365Event");var ISendFailureRemoveO365Event=function(){};ISendFailureRemoveO365Event.registerInterface("ISendFailureRemoveO365Event");_y.gw=function(){};_y.gw.registerInterface("_y.gw");_y.iB=function(){};_y.iB.registerInterface("_y.iB");_y.ih=function(){};_y.ih.registerInterface("_y.ih");_y.jy=function(){};_y.jy.regis

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	269744
Entropy (8bit):	7.97637072594837
Encrypted:	false
SSDEEP:	6144:ujeC/4dCTU4QE7BmgMrQDa+oFSj9MAuFqcIQF4RT9PawAFAIl:ujeC/yAvbcU4SjkMCYHg7
MD5:	191330C4972B64B5582DB7367404EAEB
SHA1:	87A9FBC315858A987911BA9438DCE939B2870BED
SHA-256:	5934BD9048AD760CCBA5235084A3C01C9A332D17963D669CEDE8B3F7A91A6E0F
SHA-512:	A7E8E6FE9E372048EA2518D19ECD1DA42E44E242A2119D195BB523C6E607307969AD64468B29EB665B35F9EC3E367CFB715A888FF0BE876780DB0B89973E81D7
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauthimages.net/81d6b03a-bocptwwhbyyvw9ygnh-lj9smgsjc671bhchkes1kg-q/logintenantbranding/0/illustration?ts=636942574602374519
Preview:	......Exif..II*.................Ducky.......U......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:5db5992f-8b37-4af2-b488-a8fe0fb7ef43" xmpMM:DocumentID="xmp.did:C5697EAA73AF11E9A68C86876F55B700" xmpMM:InstanceID="xmp.iid:C5697EA973AF11E9A68C86876F55B700" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f31f4fb3-e924-442f-9ee5-5737b77c8d8e" stRef:documentID="xmp.did:5db5992f-8b37-4af2-b488-a8fe0fb7ef43"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 280 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4075
Entropy (8bit):	7.810220421048297
Encrypted:	false
SSDEEP:	96:fPiYR2MtSj3iyLtq4x/PRO40N2WZaoD6LCNr7ecRIx:frftSWyLY4x/PRO40gWYoDlNr7H0
MD5:	B78552E6413D14868B0402C0CA513E3A
SHA1:	7AD4E9123F4918C4D92532D752E6FD8B1D747D55
SHA-256:	AD65385D44EAAC33D897BD7CA6FC01F7BD604EDFDCFA53A4F35C50F6C11C7DB6
SHA-512:	6B5981A3E70B52449B667943FF1AE365D6EDCA4F57258A77427A714CAFC396771F5123EAC4067EAEEB72E237304CC770254FEB4523DAEEF8E745C69E69962B77
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<............tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmpMM:InstanceID="xmp.iid:0D00546673B111E9A68C86876F55B700" xmpMM:DocumentID="xmp.did:50006AEE73B111E9A68C86876F55B700"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0D00546473B111E9A68C86876F55B700" stRef:documentID="xmp.did:0D00546573B111E9A68C86876F55B700"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.od....YIDATx..]..VU.....R#.-.8F.H..Q+..W....h.p...*..2.... ..4S36.(...%Ay.^..I(.+.4.l.._)O.......;t...u.....f

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	132
Entropy (8bit):	4.945787382366693
Encrypted:	false
SSDEEP:	3:yionv//thPnFuXf8Lts7CX9/gm6Kp0syxtuIdsvFQAahUMZ/jp:6v/lhPBR/C+aNuqsvFQA0UMpp
MD5:	3EDA15637AFEAC6078F56C9DCC9BBDB8
SHA1:	97B900884183CB8CF99BA069EEDC280C599C1B74
SHA-256:	68C66D144855BA2BC8B8BEE88BB266047367708C1E281A21B9D729B1FBD23429
SHA-512:	06B21827589FCAF63B085DB2D662737B24A39A697FF9138BDF188408647C3E90784B355F2B8390160CA487992C033CE735599271EE35873E1941812AB6C34B52
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8093.27/resources/images/0/sprite1.mouse.png
Preview:	.PNG........IHDR...X..........x......sRGB.........gAMA......a.....pHYs..........o.d....IDATHK..1......Om.O ...j.a...\BW....IEND.B`.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
Category:	downloaded
Size (bytes):	663451
Entropy (8bit):	5.3635307555313165
Encrypted:	false
SSDEEP:	12288:YhqblwQ9eTw/suNyIzaJS/pWYawUWufSxwDr2o/5YP1B:Yhqblt9e8/sMzaJS/pWYawUWufSxwDrW
MD5:	761CE9E68C8D14F49B8BF1A0257B69D6
SHA1:	8CF5D714D35EFFA54F3686065CB62CCE028E2C77
SHA-256:	BEAA65AD34340E61E9E701458E2CCFF8F9073FDEBBC3593A2C7EC8AFEACB69C1
SHA-512:	CEC948666FBA0F56D3DA27A931033C3A581C9C00FEC4D3DDCF41324525B5B5321AE3AB89581ECC7F497DE85EF684AB277C8A2DB393D526416CEB76C91A1B9263
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8093.27/scripts/boot.worldwide.0.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.0.mouse.js'] = (new Date()).getTime();../* Empty file */;Function.__typeName="Function";Function.__class=!0;Function.createCallback=function(n,t){return function(){var r=arguments.length;if(r>0){for(var u=[],i=0;i<r;i++)u[i]=arguments[i];u[r]=t;return n.apply(this,u)}return n.call(this,t)}};Function.prototype.bind=Function.prototype.bind\|\|function(n){if(typeof this!="function")throw new TypeError("bind(): we can only bind to functions");var u=Array.prototype.slice.call(arguments,1),r=this,t=function(){},i=function(){return r.apply(this instanceof t?this:n,u.concat(Array.prototype.slice.call(arguments)))};this.prototype&&(t.prototype=this.prototype);i.prototype=new t;return i};Function.createDelegate=function(n,t){return function(){return t.apply(n,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Error.__typeNam

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	449728
Entropy (8bit):	5.448588781180164
Encrypted:	false
SSDEEP:	6144:u7PuGBkXlRK2d/ZkpZYRsmA2pmBe9OpRUS4cEHKE0H3NX44/:u7D0Zkp6umhpsUSu0
MD5:	40B17FF1AA4D4490F7382A25F23C2DC7
SHA1:	401F26BDF93A14779CA131C29E385C97F1FF9830
SHA-256:	9019F3CFFB86BF28F83D0E85EEBF21FD0A37C4BF159EDFCB6F18D0DF12CB5E02
SHA-512:	2A197A7165E9EB5BF3860BDD3845A8D7F6A47CAEF801DB15E1D21906329D6C79F32BF28CBAFC83C2FAA131F71C3F81FB9668116AAF999644AB6887F61508FE48
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32009)
Category:	downloaded
Size (bytes):	57443
Entropy (8bit):	5.372940573746363
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3D7ym+d/Px25+1wtvGixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJz7ym+d/Po5+1wtvGiJig/Ml
MD5:	D580777BB3A28B94F6F1D18EE17AEDA3
SHA1:	E78833A2DB1AA97DA3F4A1994E6AF1F0D74D7CC7
SHA-256:	81188E8A76162C79DB4A5C10AC933C9E874C5B9EAE10E47956AD9DF704E01B28
SHA-512:	E3F5FFE3E7E54A7D640DF3BC06D336C9F936635D2594159B3EA5EDAEFBA6D6774060A532E0CBE0664FDC65806BD53E9BFC19C11F7946A5E157A9EC935C564378
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	659798
Entropy (8bit):	5.352921769071548
Encrypted:	false
SSDEEP:	12288:nEMsQrWEWbnByixmwgXZewhYcFiG4DUIxo:nEMsJpBJgHKcFQNo
MD5:	9786D38346567E5E93C7D03B06E3EA2D
SHA1:	23EF8C59C5C9AA5290865933B29C9C56AB62E3B0
SHA-256:	263307E3FE285C85CB77CF5BA69092531CE07B7641BF316EF496DCB5733AF76C
SHA-512:	4962CDF483281AB39D339A7DA105A88ADDB9C210C9E36EA5E36611D7135D19FEC8B3C9DBA3E97ABB36D580F194F1860813071FD6CBEDE85D3E88952D099D6805
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8093.27/scripts/boot.worldwide.1.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.1.mouse.js'] = (new Date()).getTime();..;_a.d.G=function(n,t){this.b=n;this.a=t};_a.d.G.prototype={b:0,a:0};_a.fo=function(n){this.s=n};_a.fo.prototype={s:null,t:null,i:function(){return this.s.currentTarget},e:function(){return this.t?this.t.x:this.s.pageX},f:function(){return this.t?this.t.y:this.s.pageY},o:function(){return this.s.relatedTarget},b:function(){return this.s.target},n:function(){return this.s.timeStamp\|\|+new Date},a:function(){var n=this.s.which;!n&&_a.o.a().K&&this.s.type==="keypress"&&(n=this.u());return n},u:function(){return this.s.keyCode},m:function(){return this.s.originalEvent},j:function(){return this.s.type},k:function(){return this.s.originalEvent.touches},q:function(){return this.s.isDefaultPrevented()},g:function(){return this.s.shiftKey},h:function(){return _j.G.a().P?this.s.metaKey:this.s.ctrlKey},l:

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	dropped
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	449728
Entropy (8bit):	5.448588781180164
Encrypted:	false
SSDEEP:	6144:u7PuGBkXlRK2d/ZkpZYRsmA2pmBe9OpRUS4cEHKE0H3NX44/:u7D0Zkp6umhpsUSu0
MD5:	40B17FF1AA4D4490F7382A25F23C2DC7
SHA1:	401F26BDF93A14779CA131C29E385C97F1FF9830
SHA-256:	9019F3CFFB86BF28F83D0E85EEBF21FD0A37C4BF159EDFCB6F18D0DF12CB5E02
SHA-512:	2A197A7165E9EB5BF3860BDD3845A8D7F6A47CAEF801DB15E1D21906329D6C79F32BF28CBAFC83C2FAA131F71C3F81FB9668116AAF999644AB6887F61508FE48
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_QLF_8apNRJD3OCol8jwtxw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14782)
Category:	dropped
Size (bytes):	15755
Entropy (8bit):	5.366543080044668
Encrypted:	false
SSDEEP:	384:DveX/4OSgcn2ZU2ZfeXOh+rF3X1qDZD4zfXdv79HU:q/9i57hU
MD5:	630831903F4BA9060856520624E34CFC
SHA1:	36DC15B9CCC3FC8EF627354BF55EF44EBD10E203
SHA-256:	BC6804D058D5BD5B24FC04E479FC8973BEF5D3EFEAFAA9C19C60A009BF0FAC0B
SHA-512:	1B0759972BBAB0B1A11D54849051E6782600B74FADB1CAF1BD58D214F484E35154907CA7F396EDB1C81A7CDC6F264D138267FB58FD89E1BA3A4D67366EE7E8B0
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{519:function(e,n,s

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	232394
Entropy (8bit):	5.54543362321178
Encrypted:	false
SSDEEP:	1536:yldzLx/ivZfjbOv/LBbLeXeKEXK81KKVKKdKbSK0cKcyKf75DMkvqBCWcDAPf4bT:Ux/ivZfjbOv/LBbLMTq9cDw4bLl1We/
MD5:	AF8D946B64D139A380CF3A1C27BDBEB0
SHA1:	C76845B6FFEAF14450795C550260EB618ABD60AB
SHA-256:	37619B16288166CC76403F0B7DF6586349B2D5628DE00D5850C815D019B17904
SHA-512:	C5CFB514F993310676E834C8A5477576BD57C82A8665387F9909BA0D4C3C2DE693E738ACAA74E7B4CA20894EA2FEEA5CF9A2428767D03FE1DE9C84538FDC3EE9
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8093.27/resources/styles/0/boot.worldwide.mouse.css
Preview:	.feedbackList{-webkit-animation-duration:.17s;-moz-animation-duration:.17s;animation-duration:.17s;-webkit-animation-name:feedbackListFrames;-moz-animation-name:feedbackListFrames;animation-name:feedbackListFrames;-webkit-animation-fill-mode:both;-moz-animation-fill-mode:both;animation-fill-mode:both}@-webkit-keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-webkit-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@-moz-keyframes feedbackListFrames{from{-moz-transform:scale(1,1);transform:scale(1,1);-moz-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-moz-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);-moz-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 02:06:19.885637045 CET	49675	443	192.168.2.4	173.222.162.32
Oct 28, 2024 02:06:26.571686983 CET	49735	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:26.571741104 CET	443	49735	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:26.571831942 CET	49735	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:26.571966887 CET	49736	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:26.572024107 CET	443	49736	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:26.572086096 CET	49736	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:26.572177887 CET	49735	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:26.572196960 CET	443	49735	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:26.572391033 CET	49736	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:26.572408915 CET	443	49736	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:27.686453104 CET	443	49736	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:27.687279940 CET	49736	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:27.687325001 CET	443	49736	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:27.688826084 CET	443	49736	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:27.688889980 CET	49736	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:27.688899994 CET	443	49736	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:27.688940048 CET	49736	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:27.690346956 CET	443	49735	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:27.690401077 CET	49736	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:27.690485001 CET	443	49736	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:27.690668106 CET	49735	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:27.690704107 CET	443	49735	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:27.690903902 CET	49736	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:27.690912962 CET	443	49736	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:27.692255020 CET	443	49735	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:27.692316055 CET	49735	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:27.692327023 CET	443	49735	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:27.692397118 CET	49735	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:27.693501949 CET	49735	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:27.693584919 CET	443	49735	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:27.745708942 CET	49735	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:27.745714903 CET	49736	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:27.745721102 CET	443	49735	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:27.793221951 CET	49735	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:27.995034933 CET	49739	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:06:27.995094061 CET	443	49739	142.250.74.196	192.168.2.4
Oct 28, 2024 02:06:27.995167017 CET	49739	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:06:27.995369911 CET	49739	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:06:27.995392084 CET	443	49739	142.250.74.196	192.168.2.4
Oct 28, 2024 02:06:28.848799944 CET	443	49739	142.250.74.196	192.168.2.4
Oct 28, 2024 02:06:28.888066053 CET	49739	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:06:28.975671053 CET	49739	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:06:28.975693941 CET	443	49739	142.250.74.196	192.168.2.4
Oct 28, 2024 02:06:28.976797104 CET	443	49739	142.250.74.196	192.168.2.4
Oct 28, 2024 02:06:28.976896048 CET	49739	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:06:29.100430012 CET	49739	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:06:29.100658894 CET	443	49739	142.250.74.196	192.168.2.4
Oct 28, 2024 02:06:29.155730009 CET	49739	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:06:29.155746937 CET	443	49739	142.250.74.196	192.168.2.4
Oct 28, 2024 02:06:29.199672937 CET	49739	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:06:29.427685022 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:29.427743912 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:29.427834034 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:29.430210114 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:29.430234909 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:30.294064045 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:30.294194937 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:30.300568104 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:30.300585032 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:30.301007986 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:30.354703903 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:30.379558086 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:30.427331924 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:30.627249956 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:30.627453089 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:30.627645969 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:30.627681017 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:30.627692938 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:30.627701044 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:30.627708912 CET	49740	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:30.627712965 CET	443	49740	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:30.682436943 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:30.682498932 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:30.682607889 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:30.690288067 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:30.690310001 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:31.268191099 CET	443	49736	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:31.268248081 CET	443	49736	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:31.268265963 CET	443	49736	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:31.268280029 CET	443	49736	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:31.268376112 CET	49736	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:31.268435001 CET	443	49736	40.99.149.98	192.168.2.4
Oct 28, 2024 02:06:31.268460035 CET	49736	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:31.269551992 CET	49736	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:31.269597054 CET	49736	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:06:31.546433926 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:31.546519041 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:31.641071081 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:31.641115904 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:31.641711950 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:31.646368980 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:31.691359997 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:31.892611980 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:31.893229961 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:31.893311024 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:31.896104097 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:31.896146059 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:31.896192074 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 02:06:31.896208048 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 02:06:32.150515079 CET	49672	443	192.168.2.4	173.222.162.32
Oct 28, 2024 02:06:32.150557041 CET	443	49672	173.222.162.32	192.168.2.4
Oct 28, 2024 02:06:33.429934978 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:33.429986000 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:33.430063009 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:33.430377007 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:33.430388927 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.468740940 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.469441891 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:34.469481945 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.470968962 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.471044064 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:34.475941896 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:34.476085901 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.476217031 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:34.476226091 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.525294065 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:34.705400944 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.745394945 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:34.820802927 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.820822954 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.820846081 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.820856094 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.820884943 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.820885897 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:34.820935011 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.820956945 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:34.820986986 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:34.863405943 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.863432884 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.863493919 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:34.863508940 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.863553047 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:34.937350035 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.937438011 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.937463999 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:34.937494040 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:34.937531948 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:34.937556982 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.052069902 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.052124023 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.052184105 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.052221060 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.052243948 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.052272081 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.094064951 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.094110966 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.094151020 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.094175100 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.094212055 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.094239950 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.167998075 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.168020964 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.168117046 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.168134928 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.168183088 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.282408953 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.282435894 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.282521963 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.282551050 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.282773018 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.324822903 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.324867010 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.324909925 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.324922085 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.324980974 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.397659063 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.397706032 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.397742987 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.397759914 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.397782087 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.397890091 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.397975922 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.398320913 CET	49744	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.398336887 CET	443	49744	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.423698902 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.423741102 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:35.423816919 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.424233913 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:35.424254894 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.475229025 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.475573063 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.475588083 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.477094889 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.477197886 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.477586985 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.477682114 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.477842093 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.523334026 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.525527000 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.525537968 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.571281910 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.710989952 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.760059118 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.830113888 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.830147028 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.830195904 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.830214977 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.830235004 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.830250978 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.830262899 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.830307007 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.830307007 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.830307007 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.830307007 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.830324888 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.830328941 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.871530056 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.871602058 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.871624947 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.871639013 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.871669054 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.871673107 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.871690035 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.921858072 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.950524092 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.950551033 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.950597048 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.950618029 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.950633049 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.950633049 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.950649023 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:36.950661898 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.950661898 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:36.950778008 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.068633080 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.068685055 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.068720102 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.068728924 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.068780899 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.068850040 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.110270977 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.110321045 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.110368967 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.110378027 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.110414982 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.110420942 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.183365107 CET	49723	80	192.168.2.4	2.19.126.163
Oct 28, 2024 02:06:37.189529896 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.189579964 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.189627886 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.189639091 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.189671993 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.189718008 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.189838886 CET	80	49723	2.19.126.163	192.168.2.4
Oct 28, 2024 02:06:37.189891100 CET	49723	80	192.168.2.4	2.19.126.163
Oct 28, 2024 02:06:37.307240963 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.307291031 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.307324886 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.307338953 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.307382107 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.307408094 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.348931074 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.348977089 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.349031925 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.349041939 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.349083900 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.349083900 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.426632881 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.426712990 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.426736116 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.426748037 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.426789999 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.426903963 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.426987886 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.427359104 CET	49751	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.427371979 CET	443	49751	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.971816063 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.971852064 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:37.971914053 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.972739935 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:37.972754955 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:38.132611990 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:38.132633924 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:38.132836103 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:38.133441925 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:38.133492947 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:38.133555889 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:38.134160995 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:38.134175062 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:38.134335995 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:38.134356022 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:38.838537931 CET	443	49739	142.250.74.196	192.168.2.4
Oct 28, 2024 02:06:38.838623047 CET	443	49739	142.250.74.196	192.168.2.4
Oct 28, 2024 02:06:38.838706017 CET	49739	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:06:38.950470924 CET	49739	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:06:38.950496912 CET	443	49739	142.250.74.196	192.168.2.4
Oct 28, 2024 02:06:39.031919956 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.032315016 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.032340050 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.033449888 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.033854961 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.034007072 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.034012079 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.034027100 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.090558052 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.178335905 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.178733110 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.178751945 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.179224968 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.179721117 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.179721117 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.179740906 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.179815054 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.192025900 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.192317963 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.192378998 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.195956945 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.196149111 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.196566105 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.196567059 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.196599960 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.196752071 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.231005907 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.246485949 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.246500969 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.268001080 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.292603016 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.309133053 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.386810064 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.386838913 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.386857033 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.386908054 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.386930943 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.386930943 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.386945963 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.386974096 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.386981010 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.387013912 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.387073040 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.389081955 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.389127970 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.389169931 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.389179945 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.389216900 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.389287949 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.412913084 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.433549881 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.466492891 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.486427069 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.506465912 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.506520987 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.506669044 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.506669044 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.506680012 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.510627031 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.531985998 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.532025099 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.532067060 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.532088041 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.532100916 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.532145023 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.532145023 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.532166004 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.532181978 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.532205105 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.532392025 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.533792019 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.533802986 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.533827066 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.533873081 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.534172058 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.534178972 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.534641981 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.553416967 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.553445101 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.553504944 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.553524017 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.553597927 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.553637981 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.553672075 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.553706884 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.553739071 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.599731922 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.599790096 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.599844933 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.599864006 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.599884987 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.599900961 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.599908113 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.599941015 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.600689888 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.624439001 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.624510050 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.624571085 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.624581099 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.624624968 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.625102043 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.626254082 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.626300097 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.626367092 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.626374006 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.626435041 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.626555920 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.651612997 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.651671886 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.651840925 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.651840925 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.651853085 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.651983976 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.676260948 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.676281929 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.676376104 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.676407099 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.676552057 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.719450951 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.719526052 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.719569921 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.719629049 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.721111059 CET	49760	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.721146107 CET	443	49760	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.724562883 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.724612951 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.724833965 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.725033045 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.725059986 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.743575096 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.743607044 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.743736029 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.743745089 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.743786097 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.743918896 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.769659996 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.769712925 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.769819021 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.769819021 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.769829035 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.770023108 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.771003962 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.771045923 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.771102905 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.771110058 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.771184921 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.771184921 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.861618996 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.861721992 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.861874104 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.861892939 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.861978054 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.863136053 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.864419937 CET	49757	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.864443064 CET	443	49757	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.889204979 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.889236927 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.889364004 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.889364004 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:39.889384985 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:39.889539003 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.007419109 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.007452011 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.007563114 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.007563114 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.007582903 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.007930040 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.008646965 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.008668900 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.008747101 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.008747101 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.008754969 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.008827925 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.126208067 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.126238108 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.126435041 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.126456022 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.126719952 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.168252945 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.168277979 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.168529034 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.168548107 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.169426918 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.245338917 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.245362997 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.245435953 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.245448112 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.245734930 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.363069057 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.363091946 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.363231897 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.363245010 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.363326073 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.364119053 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.364139080 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.364216089 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.364216089 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.364223957 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.364511967 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.481791019 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.481817961 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.481863022 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.481878042 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.481920958 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.482777119 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.482800007 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.482837915 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.482844114 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.482872009 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.482887983 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.600321054 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.600346088 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.600403070 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.600418091 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.600446939 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.600467920 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.601475954 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.601495981 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.601540089 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.601546049 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.601591110 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.601603985 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.685652018 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.685677052 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.685736895 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.685748100 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.685813904 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.719782114 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.719805002 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.719866991 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.719875097 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.719923019 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.755969048 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.756212950 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.756234884 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.756560087 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.757132053 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.757152081 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.757179022 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.761749029 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.761774063 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.761816025 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.761826038 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.761873960 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.761888027 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.808315992 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.838947058 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.838970900 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.839015007 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.839024067 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.839075089 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.839081049 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.880445957 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.880476952 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.880511999 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.880522013 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.880563974 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.957225084 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.957251072 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.957288980 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.957297087 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.957334995 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.958204031 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.958224058 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.958276033 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.958281994 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:40.958318949 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:40.987770081 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.028214931 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.075436115 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.075463057 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.075501919 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.075510979 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.075544119 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.075562954 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.076339006 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.076359034 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.076399088 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.076404095 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.076440096 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.105056047 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.105067015 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.105082989 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.105088949 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.105114937 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.105117083 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.105139017 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.105154991 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.105185032 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.117841005 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.117863894 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.117912054 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.117923975 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.117964983 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.118022919 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.118068933 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.118076086 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.118113041 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.118165016 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.118843079 CET	49759	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.118860960 CET	443	49759	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.132472038 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.132522106 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.132586956 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.133150101 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.133168936 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.148914099 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.148922920 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.148957014 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.148974895 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.148983955 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.149019957 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.149035931 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.165283918 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.165339947 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.165407896 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.165719986 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.165736914 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.222738028 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.222757101 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.222811937 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.222820044 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.222870111 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.232285023 CET	49765	443	192.168.2.4	52.98.152.194
Oct 28, 2024 02:06:41.232311010 CET	443	49765	52.98.152.194	192.168.2.4
Oct 28, 2024 02:06:41.232495070 CET	49765	443	192.168.2.4	52.98.152.194
Oct 28, 2024 02:06:41.232721090 CET	49765	443	192.168.2.4	52.98.152.194
Oct 28, 2024 02:06:41.232729912 CET	443	49765	52.98.152.194	192.168.2.4
Oct 28, 2024 02:06:41.266148090 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.266215086 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.266220093 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.266231060 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:41.266282082 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.266690016 CET	49762	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:41.266700029 CET	443	49762	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.174154997 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.174464941 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.174494028 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.175024986 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.175410986 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.175518036 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.175622940 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.208893061 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.211920023 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.211956978 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.213562012 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.213649988 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.213967085 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.214054108 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.214113951 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.214135885 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.219330072 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.259125948 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.335038900 CET	443	49765	52.98.152.194	192.168.2.4
Oct 28, 2024 02:06:42.335270882 CET	49765	443	192.168.2.4	52.98.152.194
Oct 28, 2024 02:06:42.335289001 CET	443	49765	52.98.152.194	192.168.2.4
Oct 28, 2024 02:06:42.336332083 CET	443	49765	52.98.152.194	192.168.2.4
Oct 28, 2024 02:06:42.336388111 CET	49765	443	192.168.2.4	52.98.152.194
Oct 28, 2024 02:06:42.381326914 CET	49765	443	192.168.2.4	52.98.152.194
Oct 28, 2024 02:06:42.381334066 CET	443	49765	52.98.152.194	192.168.2.4
Oct 28, 2024 02:06:42.381493092 CET	49765	443	192.168.2.4	52.98.152.194
Oct 28, 2024 02:06:42.381568909 CET	443	49765	52.98.152.194	192.168.2.4
Oct 28, 2024 02:06:42.381701946 CET	49765	443	192.168.2.4	52.98.152.194
Oct 28, 2024 02:06:42.381710052 CET	443	49765	52.98.152.194	192.168.2.4
Oct 28, 2024 02:06:42.407560110 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.427860975 CET	49765	443	192.168.2.4	52.98.152.194
Oct 28, 2024 02:06:42.443521023 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.458486080 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.489706993 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.524950027 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.524979115 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.525044918 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.525064945 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.525098085 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.525110006 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.525121927 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.525149107 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.525172949 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.525223017 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.561620951 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.561639071 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.561659098 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.561669111 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.561695099 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.561712980 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.561784983 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.561837912 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.561866999 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.565015078 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.565037012 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.565071106 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.565078974 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.565114975 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.602073908 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.602087021 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.602108955 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.602158070 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.602207899 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.602238894 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.602277040 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.619770050 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.643469095 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.643481016 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.643548965 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.643564939 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.643588066 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.643603086 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.643616915 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.643650055 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.654349089 CET	443	49765	52.98.152.194	192.168.2.4
Oct 28, 2024 02:06:42.654371023 CET	443	49765	52.98.152.194	192.168.2.4
Oct 28, 2024 02:06:42.654437065 CET	49765	443	192.168.2.4	52.98.152.194
Oct 28, 2024 02:06:42.654449940 CET	443	49765	52.98.152.194	192.168.2.4
Oct 28, 2024 02:06:42.654637098 CET	49765	443	192.168.2.4	52.98.152.194
Oct 28, 2024 02:06:42.658936977 CET	49765	443	192.168.2.4	52.98.152.194
Oct 28, 2024 02:06:42.658967972 CET	443	49765	52.98.152.194	192.168.2.4
Oct 28, 2024 02:06:42.659059048 CET	49765	443	192.168.2.4	52.98.152.194
Oct 28, 2024 02:06:42.680721998 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.680747986 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.680794954 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.680831909 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.680850983 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.681077003 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.759326935 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.759355068 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.759403944 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.759432077 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.759460926 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.759474993 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.797992945 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.798011065 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.798093081 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.798105001 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.798404932 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.799577951 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.799604893 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.799643040 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.799655914 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.799669981 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.799695015 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.837940931 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.837956905 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.838052988 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.838068962 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.838442087 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.877650976 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.877783060 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.877785921 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.877818108 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.877856016 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.877876043 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.916384935 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.916404009 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.916490078 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.916497946 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.917035103 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.993668079 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.993702888 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.993742943 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.993757963 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:42.993789911 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:42.993803024 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.033868074 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.033901930 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.033915043 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.033921003 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.033963919 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.033973932 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.034035921 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.034039021 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.034049988 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.034065008 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.034091949 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.074145079 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.074162006 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.074215889 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.074223042 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.074281931 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.110769987 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.110836983 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.110845089 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.110867977 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.110898018 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.110913038 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.151350975 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.151375055 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.151417017 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.151424885 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.151454926 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.151469946 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.152163029 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.152179956 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.152240992 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.152251005 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.152345896 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.192385912 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.192403078 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.192441940 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.192449093 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.192482948 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.192498922 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.228221893 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.228271961 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.228287935 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.228296041 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.228326082 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.228343010 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.268825054 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.268887997 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.268904924 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.268913984 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.268943071 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.268955946 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.270654917 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.270679951 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.270721912 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.270731926 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.270754099 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.270766020 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.346188068 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.346214056 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.346275091 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.346283913 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.346330881 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.387329102 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.387346983 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.387398958 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.387469053 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.387482882 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.387552977 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.388725996 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.388740063 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.388787031 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.388793945 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.388823986 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.388838053 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.462121010 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.462145090 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.462189913 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.462199926 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.462241888 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.463381052 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.463402987 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.463439941 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.463444948 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.463476896 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.463493109 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.503375053 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.503421068 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.503441095 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.503467083 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.503499985 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.503513098 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.503643036 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.505338907 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.505357027 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.505409956 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.505424023 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.505467892 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.506398916 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.506413937 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.506449938 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.506455898 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.506484985 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.506496906 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.544739008 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.580698013 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.580754042 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.580768108 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.580785990 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.580818892 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.580835104 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.620448112 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.620495081 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.620527983 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.620532990 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.620562077 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.620579958 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.623192072 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.623212099 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.623260975 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.623274088 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.623303890 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.623322010 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.624546051 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.624562025 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.624614954 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.624622107 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.624675035 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.697762966 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.697813034 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.697840929 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.697890997 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.697895050 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.697932005 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.737766981 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.737817049 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.737850904 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.737855911 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.737890959 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.737914085 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.741364956 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.741385937 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.741497040 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.741513968 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.741610050 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.742320061 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.742336035 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.742403984 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.742409945 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.742516994 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.815393925 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.815443993 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.815474033 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.815485954 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.815521955 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.815536976 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.854361057 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.854383945 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.854433060 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.854439020 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.854474068 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.859500885 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.859519958 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.859558105 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.859569073 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.859595060 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.859611034 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.860438108 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.860455036 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.860511065 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.860517025 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.860693932 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.911485910 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.911504030 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.911561966 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.911571026 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.911629915 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.931997061 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.932044983 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.932096004 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.932102919 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.932142019 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.971472025 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.971518040 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.971550941 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.971563101 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.971590042 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.971606970 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.972903967 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.972945929 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.972970963 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.972976923 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.973020077 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.978333950 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.978351116 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.978410959 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:43.978420973 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:43.978585958 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.029284954 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.029300928 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.029350042 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.029356003 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.029393911 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.030929089 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.030966043 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.030999899 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.031004906 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.031034946 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.031059027 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.031455040 CET	49764	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.031471014 CET	443	49764	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.040457964 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.040478945 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.040549994 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.042511940 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.042521954 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.049959898 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.049983978 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.050023079 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.050033092 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.050061941 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.050076962 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.067734003 CET	49768	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.067812920 CET	443	49768	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.067899942 CET	49768	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.068291903 CET	49768	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.068322897 CET	443	49768	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.070842981 CET	49769	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.070877075 CET	443	49769	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.071049929 CET	49769	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.071480036 CET	49769	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.071492910 CET	443	49769	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.072216988 CET	49770	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.072240114 CET	443	49770	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.072372913 CET	49770	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.073792934 CET	49770	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.073812008 CET	443	49770	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.088905096 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.088957071 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.088985920 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.088993073 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.089054108 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.089634895 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.089721918 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.089728117 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.089808941 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:44.089852095 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.090303898 CET	49763	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:44.090313911 CET	443	49763	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.084577084 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.084948063 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.084961891 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.085289001 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.092164993 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.092237949 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.092750072 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.101061106 CET	443	49768	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.101408005 CET	49768	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.101443052 CET	443	49768	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.101739883 CET	443	49768	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.102222919 CET	49768	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.102224112 CET	49768	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.102273941 CET	443	49768	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.115381956 CET	443	49770	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.115727901 CET	49770	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.115739107 CET	443	49770	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.116786003 CET	443	49770	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.117095947 CET	49770	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.117502928 CET	49770	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.117566109 CET	443	49770	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.117718935 CET	49770	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.117726088 CET	443	49770	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.139317989 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.140010118 CET	443	49769	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.140408993 CET	49769	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.140433073 CET	443	49769	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.141613960 CET	443	49769	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.145433903 CET	49769	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.145615101 CET	443	49769	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.145715952 CET	49769	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.153301954 CET	49768	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.169301033 CET	49770	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.187329054 CET	443	49769	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.198585033 CET	49769	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.322590113 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.337109089 CET	443	49768	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.349085093 CET	443	49770	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.349133968 CET	443	49770	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.349189997 CET	443	49770	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.349246025 CET	49770	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.349309921 CET	49770	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.363698959 CET	49770	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.363739014 CET	443	49770	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.373089075 CET	49771	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.373127937 CET	443	49771	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.373181105 CET	49771	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.373519897 CET	49771	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.373529911 CET	443	49771	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.375643969 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.377283096 CET	443	49769	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.377415895 CET	443	49769	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.377469063 CET	49769	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.377477884 CET	443	49769	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.377521038 CET	49769	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.377574921 CET	443	49769	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.377616882 CET	49769	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.378365040 CET	49769	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.378375053 CET	443	49769	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.382872105 CET	49772	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.382905960 CET	443	49772	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.382972956 CET	49772	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.383217096 CET	49772	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.383230925 CET	443	49772	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.386461973 CET	49768	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.440576077 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.440588951 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.440608978 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.440623045 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.440629959 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.440774918 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.440774918 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.440784931 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.440857887 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.443511009 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.443527937 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.443578959 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.443586111 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.445825100 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.453661919 CET	443	49768	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.453670025 CET	443	49768	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.453690052 CET	443	49768	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.453702927 CET	443	49768	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.453710079 CET	443	49768	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.453747034 CET	49768	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.453773975 CET	443	49768	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.453799963 CET	443	49768	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.453824043 CET	49768	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.454441071 CET	49768	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.559324980 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.559345961 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.559385061 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.559391975 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.559428930 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.566241980 CET	49768	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.566279888 CET	443	49768	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.627434969 CET	49773	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.627464056 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.627523899 CET	49773	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.627739906 CET	49773	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.627751112 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.667620897 CET	49774	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:45.667644024 CET	443	49774	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:45.667782068 CET	49774	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:45.668503046 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:45.668555975 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:45.668689013 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:45.668725967 CET	49774	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:45.668735981 CET	443	49774	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:45.669007063 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:45.669018984 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:45.724262953 CET	49776	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.724296093 CET	443	49776	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.724456072 CET	49776	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.724922895 CET	49776	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.724934101 CET	443	49776	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.882846117 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.882858038 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.882893085 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.882919073 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.882930994 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.882965088 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.883296013 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.883322954 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.883356094 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.883361101 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.883385897 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.883399963 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.884679079 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.884695053 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.884752989 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.884758949 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.884804964 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.912199974 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.912218094 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.912255049 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.912261009 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.912295103 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.913754940 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.913772106 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.913819075 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:45.913825035 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:45.913877964 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.030611038 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.030644894 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.030731916 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.030739069 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.030774117 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.071739912 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.071758986 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.071804047 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.071809053 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.071841002 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.148958921 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.148979902 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.149022102 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.149028063 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.149064064 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.190036058 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.190057039 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.190109968 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.190115929 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.190165043 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.267508030 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.267529011 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.267600060 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.267606020 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.267644882 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.384087086 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.384109020 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.384169102 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.384174109 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.384207010 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.385174990 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.385191917 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.385220051 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.385226011 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.385260105 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.385278940 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.419655085 CET	443	49771	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.419939041 CET	49771	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.419962883 CET	443	49771	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.420416117 CET	443	49771	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.420969009 CET	49771	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.421041012 CET	443	49771	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.421191931 CET	49771	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.426772118 CET	443	49772	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.427081108 CET	49772	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.427105904 CET	443	49772	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.427654028 CET	443	49772	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.428281069 CET	49772	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.428364992 CET	443	49772	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.428431988 CET	49772	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.467325926 CET	443	49771	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.475325108 CET	443	49772	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.501825094 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.501844883 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.501888990 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.501894951 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.501936913 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.503137112 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.503153086 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.503201962 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.503207922 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.503243923 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.585870028 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.585891008 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.585947037 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.585953951 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.585998058 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.611491919 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:46.611866951 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:46.611891985 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:46.613375902 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:46.613434076 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:46.614953041 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:46.615034103 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:46.615284920 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:46.615293980 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:46.620975971 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.620995045 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.621057034 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.621063948 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.621118069 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.630281925 CET	443	49774	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:46.630501032 CET	49774	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:46.630511045 CET	443	49774	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:46.631532907 CET	443	49774	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:46.631583929 CET	49774	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:46.631912947 CET	49774	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:46.632071972 CET	49774	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:46.632077932 CET	443	49774	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:46.632091999 CET	443	49774	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:46.656708002 CET	443	49771	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.656795025 CET	443	49771	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.656846046 CET	49771	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.656863928 CET	443	49771	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.656877041 CET	443	49771	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.656928062 CET	49771	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.657176971 CET	443	49772	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.657300949 CET	443	49772	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.657355070 CET	49772	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.657371044 CET	443	49772	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.657424927 CET	443	49772	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.657468081 CET	49772	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.657881021 CET	49771	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.657891035 CET	443	49771	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.659913063 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.660160065 CET	49773	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.660176039 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.660316944 CET	49772	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.660327911 CET	443	49772	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.661149979 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.661204100 CET	49773	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.661427975 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.661443949 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.661499977 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.661505938 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.661593914 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.661683083 CET	49773	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.661731005 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.661889076 CET	49773	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.666035891 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:46.682126045 CET	49774	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:46.682132006 CET	443	49774	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:46.707319975 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.709064007 CET	49773	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.709069967 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.724287987 CET	49774	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:46.739156961 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.739177942 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.739239931 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.739247084 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.739303112 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.739720106 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.739737034 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.739805937 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.739811897 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.739854097 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.761203051 CET	49773	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.856152058 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.856172085 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.856219053 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.856240988 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.856338024 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.857325077 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.857342958 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.857763052 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.857763052 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.857769012 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.857809067 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.897439957 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.897490978 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.897506952 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.897512913 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.897527933 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.897538900 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.897561073 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.897819996 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.898030043 CET	49767	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.898037910 CET	443	49767	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.926328897 CET	443	49776	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.926598072 CET	49776	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.926620960 CET	443	49776	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.926940918 CET	443	49776	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.927390099 CET	49776	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.927450895 CET	443	49776	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:46.927552938 CET	49776	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.947586060 CET	49773	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:46.975326061 CET	443	49776	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.015281916 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.015290976 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.015337944 CET	49773	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:47.015352964 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.015376091 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.015393972 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.015398979 CET	49773	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:47.015403032 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.015427113 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.015428066 CET	49773	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:47.015450954 CET	49773	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:47.015477896 CET	49773	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:47.015743017 CET	49773	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:47.015753031 CET	443	49773	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.159605980 CET	443	49776	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.205246925 CET	49776	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:47.278899908 CET	443	49776	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.278908014 CET	443	49776	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.278924942 CET	443	49776	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.278950930 CET	443	49776	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.278959036 CET	49776	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:47.278970957 CET	443	49776	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.279000044 CET	49776	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:47.279023886 CET	49776	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:47.279516935 CET	443	49776	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.279567003 CET	49776	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:47.279571056 CET	443	49776	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.279609919 CET	49776	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:47.280134916 CET	49776	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:47.280147076 CET	443	49776	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.285465002 CET	49779	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:47.285553932 CET	443	49779	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.285716057 CET	49779	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:47.286012888 CET	49779	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:47.286047935 CET	443	49779	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:47.444905043 CET	443	49774	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:47.444931030 CET	443	49774	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:47.444982052 CET	49774	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:47.444992065 CET	443	49774	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:47.445039034 CET	49774	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:47.445559978 CET	443	49774	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:47.445621967 CET	443	49774	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:47.445662022 CET	49774	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:47.445982933 CET	49774	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:47.445992947 CET	443	49774	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:47.446007967 CET	49774	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:47.446048021 CET	49774	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:47.467139959 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:47.467159033 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:47.467220068 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:47.467464924 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:47.467474937 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:48.193828106 CET	49782	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.193878889 CET	443	49782	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.193950891 CET	49782	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.194278002 CET	49782	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.194292068 CET	443	49782	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.195730925 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.195766926 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.195904970 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.196238041 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.196249962 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.206897020 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:48.207412958 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:48.207426071 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:48.208450079 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:48.208507061 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:48.208842993 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:48.208892107 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:48.209009886 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:48.209017038 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:48.262799978 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:48.356708050 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:48.356738091 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:48.356796980 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:48.356806993 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:48.356909037 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:48.356956959 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:48.358280897 CET	49780	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:48.358294010 CET	443	49780	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:48.363302946 CET	443	49779	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.363676071 CET	49779	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.363738060 CET	443	49779	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.365437984 CET	443	49779	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.365793943 CET	49779	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.365942955 CET	49779	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.366775990 CET	443	49779	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.401161909 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.401218891 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.401252985 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.401292086 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.401297092 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.401346922 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.401381016 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.401381016 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.401397943 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.401463032 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.404649973 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.404701948 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.404737949 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.404752016 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.404786110 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.404804945 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.406511068 CET	49779	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.518934011 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.518959045 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.519037962 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.519071102 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.519144058 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.598334074 CET	443	49779	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.634973049 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.634998083 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.635056019 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.635071993 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.635143995 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.636607885 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.636631012 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.636744022 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.636749029 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.636795998 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.650306940 CET	49779	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.719892025 CET	443	49779	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.719924927 CET	443	49779	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.719943047 CET	443	49779	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.719974041 CET	49779	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.719991922 CET	443	49779	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.719996929 CET	49779	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.720011950 CET	443	49779	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.720038891 CET	49779	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.720040083 CET	443	49779	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.720068932 CET	49779	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.720088005 CET	49779	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.720155001 CET	443	49779	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.720350027 CET	443	49779	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.720392942 CET	49779	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.720722914 CET	49779	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:48.720746994 CET	443	49779	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:48.752780914 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.752804995 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.752846956 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.752851963 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.752892017 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.869476080 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.869499922 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.869558096 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.869566917 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.869612932 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.870021105 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.870039940 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.870090961 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.870095015 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.870112896 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.870130062 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.986856937 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.986887932 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.986939907 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.986953974 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.987005949 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.988091946 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.988116980 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.988154888 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.988162041 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:48.988188028 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:48.988204956 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.104368925 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.104429960 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.104466915 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.104526997 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.104561090 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.104620934 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.144781113 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.144830942 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.144870043 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.144886971 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.144917011 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.145054102 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.222024918 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.222073078 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.222105026 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.222127914 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.222161055 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.222179890 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.232338905 CET	443	49782	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.232558012 CET	49782	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.232579947 CET	443	49782	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.232870102 CET	443	49782	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.233242989 CET	49782	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.233294964 CET	443	49782	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.233520031 CET	49782	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.238874912 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.239141941 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.239166021 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.239648104 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.240001917 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.240080118 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.240129948 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.261960030 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.262007952 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.262057066 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.262070894 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.262099028 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.262119055 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.279331923 CET	443	49782	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.287327051 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.290458918 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.339359999 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.339411974 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.339452028 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.339471102 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.339523077 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.339523077 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.381112099 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.381177902 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.381217957 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.381252050 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.381284952 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.381302118 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.456605911 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.456686020 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.456688881 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.456780910 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.464559078 CET	443	49782	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.464601994 CET	443	49782	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.464653969 CET	49782	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.464657068 CET	443	49782	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.464767933 CET	49782	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.474442005 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.517977953 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.539959908 CET	49775	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:06:49.539995909 CET	443	49775	13.107.246.45	192.168.2.4
Oct 28, 2024 02:06:49.549069881 CET	49782	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.549091101 CET	443	49782	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.593339920 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.593359947 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.593414068 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.593446016 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.593475103 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.593486071 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.593537092 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.593537092 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.593569994 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.593619108 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.593655109 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.593672991 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.595489025 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.595514059 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.595576048 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.595597982 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.595623970 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.595683098 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.712712049 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.712750912 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.712824106 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.712872982 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.712905884 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.713020086 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.831427097 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.831471920 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.831531048 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.831567049 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.831585884 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.831614017 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.832814932 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.832839012 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.832910061 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.832916975 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.832962036 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.950968027 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.951000929 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.951064110 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.951111078 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:49.951143026 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:49.951220036 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:50.067194939 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:50.067251921 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:50.067382097 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:50.067713976 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:50.067732096 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:50.071012974 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:50.071094990 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:50.071213007 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:50.071381092 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:50.071413994 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:50.212764978 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:50.212783098 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:50.212821960 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:50.212868929 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:50.212901115 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:50.212918997 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:50.212922096 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:50.212971926 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:50.215806961 CET	49783	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:50.215822935 CET	443	49783	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:50.261362076 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:50.261415005 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:50.261601925 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:50.261960030 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:50.261985064 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:50.946608067 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:50.947448015 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:50.947458029 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:50.947982073 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:50.952936888 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:50.953028917 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:50.953809977 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:50.999365091 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.191207886 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.191239119 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.191257954 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.191306114 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.191337109 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.191354990 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.191385984 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.246917009 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.246941090 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.246987104 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.247008085 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.247020960 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.247050047 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.286648989 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.287092924 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.287153006 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.287890911 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.289297104 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.289400101 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.289938927 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.303985119 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.304539919 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.304574013 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.304909945 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.305449009 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.305521011 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.305655003 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.323103905 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.323131084 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.323164940 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.323183060 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.323209047 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.323220968 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.335330009 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.351326942 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.440649033 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.440679073 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.440716028 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.440730095 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.440757990 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.440777063 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.483994007 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.484019041 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.484055996 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.484066010 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.484096050 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.484106064 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.527111053 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.527295113 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.527359009 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.527404070 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.527477980 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.527535915 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.539175034 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.559552908 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.559582949 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.559623003 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.559637070 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.559665918 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.559675932 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.588076115 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.607939005 CET	49787	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.607969046 CET	443	49787	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.649615049 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.649626017 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.649673939 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.649684906 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.649693966 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.649712086 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.649733067 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.649760008 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.658072948 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.658096075 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.658144951 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.658153057 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.658190012 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.658214092 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.677548885 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.677576065 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.677622080 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.677639961 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.677675962 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.677696943 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.724081993 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.724107981 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.724170923 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.724184990 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.724222898 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.724248886 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.774120092 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.774139881 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.774183035 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.774192095 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.774231911 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.774250984 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.796792030 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.796818972 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.796854019 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.796870947 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.796901941 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.796921968 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.839664936 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.839694977 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.839893103 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.839893103 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.839906931 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.839951992 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.890151978 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.890172958 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.890233040 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.890239954 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.890266895 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.890285969 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.891937017 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.891954899 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.891992092 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.891999006 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:51.892034054 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.892056942 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:51.915889025 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.915910959 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.915955067 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.915977955 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.915993929 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.916021109 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.998516083 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.998541117 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.998584032 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.998594999 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:51.998631954 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:51.998646021 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:52.007904053 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:52.007920980 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:52.007977962 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:52.007987022 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:52.008047104 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:52.034456968 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:52.034480095 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:52.034519911 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:52.034531116 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:52.034564972 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:52.034585953 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:52.124104023 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:52.124160051 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:52.124183893 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:52.124198914 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:52.124233007 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:52.124252081 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:52.124577999 CET	49789	443	192.168.2.4	152.199.21.175
Oct 28, 2024 02:06:52.124594927 CET	443	49789	152.199.21.175	192.168.2.4
Oct 28, 2024 02:06:52.139549971 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:52.139607906 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:52.139631033 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:52.139647007 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:52.139674902 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:52.139705896 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:52.153270006 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:52.153296947 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:52.153335094 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:52.153347015 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:52.153383017 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:52.153402090 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:52.270593882 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:52.270621061 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:52.270718098 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:52.270718098 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:52.270731926 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:52.270776033 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:52.270874977 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:06:52.270893097 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:52.270998955 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:52.271385908 CET	49786	443	192.168.2.4	13.107.246.60
Oct 28, 2024 02:06:52.271399975 CET	443	49786	13.107.246.60	192.168.2.4
Oct 28, 2024 02:07:12.583542109 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:12.583589077 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:12.583651066 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:12.583937883 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:12.583957911 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:12.759094000 CET	49735	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:07:12.759123087 CET	443	49735	40.99.149.98	192.168.2.4
Oct 28, 2024 02:07:13.327132940 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.327215910 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:13.349603891 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:13.349632978 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.350014925 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.370860100 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:13.411341906 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.560906887 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.560942888 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.561012983 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:13.561038017 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.561122894 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:13.623862028 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.623893976 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.623938084 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:13.623946905 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.623977900 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:13.623991966 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:13.740303040 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.740333080 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.740408897 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:13.740430117 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.740444899 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:13.740654945 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:13.742111921 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.742140055 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.742188931 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:13.742197990 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.742223978 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:13.742240906 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:13.858218908 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.858249903 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.858299971 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:13.858321905 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:13.858336926 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:13.858371019 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.071994066 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.072012901 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.072082996 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.072096109 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.072133064 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.072176933 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.072176933 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.073563099 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.073592901 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.073628902 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.073640108 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.073681116 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.073681116 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.074011087 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.074035883 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.074074984 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.074084997 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.074129105 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.074130058 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.093197107 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.093219042 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.093266964 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.093278885 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.093307972 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.093327045 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.134758949 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.134794950 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.134835958 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.134848118 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.134861946 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.134886980 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.210679054 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.210725069 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.210763931 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.210774899 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.210808039 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.210824966 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.251745939 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.251770973 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.251823902 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.251835108 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.251955032 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.328178883 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.328201056 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.328247070 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.328259945 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.328285933 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.328306913 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.328335047 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.328387976 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.328394890 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.328438997 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.328488111 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.328578949 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.328593016 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.328607082 CET	49795	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.328613997 CET	443	49795	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.383821011 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.383899927 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.384113073 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.387367010 CET	49797	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.387411118 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.387594938 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.387614012 CET	49797	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.387619972 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.387698889 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.388727903 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.388736963 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.388829947 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.389631033 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.389643908 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.389772892 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.389805079 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.390150070 CET	49797	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.390160084 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.390461922 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.390486956 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.391062975 CET	49800	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.391145945 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:14.391204119 CET	49800	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.391345024 CET	49800	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:14.391377926 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.117563963 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.118535995 CET	49797	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.118583918 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.119330883 CET	49797	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.119338989 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.120187044 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.120872021 CET	49800	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.120939016 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.121634960 CET	49800	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.121665001 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.122499943 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.122864962 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.122874022 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.123505116 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.123511076 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.129864931 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.130230904 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.130266905 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.130944967 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.130964041 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.140860081 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.141247988 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.141288996 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.142194986 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.142205954 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.246860027 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.246921062 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.246985912 CET	49797	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.247005939 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.247055054 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.247113943 CET	49797	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.247540951 CET	49797	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.247560024 CET	443	49797	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.249996901 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.250677109 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.250757933 CET	49800	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.250924110 CET	49800	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.250924110 CET	49800	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.250968933 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.250994921 CET	443	49800	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.253340006 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.253379107 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.253462076 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.254103899 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.254118919 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.255491018 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.255548000 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.255618095 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.255759954 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.255791903 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.258007050 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.258064032 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.258126974 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.258158922 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.258197069 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.258254051 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.258322954 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.258322954 CET	49796	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.258352041 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.258378983 CET	443	49796	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.260660887 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.260730028 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.260791063 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.260801077 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.260852098 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.260902882 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.261795998 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.261809111 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.261842966 CET	49799	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.261850119 CET	443	49799	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.265971899 CET	49803	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.265985012 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.266189098 CET	49803	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.268316984 CET	49804	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.268372059 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.268541098 CET	49803	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.268549919 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.268552065 CET	49804	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.268923998 CET	49804	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.268937111 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.272510052 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.272756100 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.272811890 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.272942066 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.272955894 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.272998095 CET	49798	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.273011923 CET	443	49798	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.277136087 CET	49805	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.277174950 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.277407885 CET	49805	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.277574062 CET	49805	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.277599096 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.990295887 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.990866899 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.990936995 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:15.991377115 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:15.991391897 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.008601904 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.008841038 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.009063959 CET	49805	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.009103060 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.009392023 CET	49803	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.009404898 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.009922028 CET	49803	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.009926081 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.010015011 CET	49805	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.010023117 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.014808893 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.015197992 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.015208960 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.015575886 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.015579939 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.019623041 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.020010948 CET	49804	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.020025969 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.020648956 CET	49804	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.020653009 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.122426987 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.122489929 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.122570038 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.122781038 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.122827053 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.122863054 CET	49802	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.122879982 CET	443	49802	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.126461983 CET	49806	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.126498938 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.126858950 CET	49806	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.127055883 CET	49806	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.127065897 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.138211966 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.138408899 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.138482094 CET	49805	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.138506889 CET	49805	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.138525963 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.138539076 CET	49805	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.138545990 CET	443	49805	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.139055967 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.139261007 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.139337063 CET	49803	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.139410019 CET	49803	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.139426947 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.139437914 CET	49803	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.139445066 CET	443	49803	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.141253948 CET	49807	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.141285896 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.141438007 CET	49807	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.141554117 CET	49807	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.141570091 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.141773939 CET	49808	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.141793966 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.141910076 CET	49808	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.142141104 CET	49808	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.142155886 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.149900913 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.150053978 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.150120974 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.150142908 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.150147915 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.150172949 CET	49801	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.150177956 CET	443	49801	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.152292013 CET	49809	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.152358055 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.152525902 CET	49809	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.152614117 CET	49809	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.152633905 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.153980017 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.154591084 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.154664040 CET	49804	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.154747963 CET	49804	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.154758930 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.154767990 CET	49804	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.154772043 CET	443	49804	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.157270908 CET	49810	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.157282114 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.157356024 CET	49810	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.157449961 CET	49810	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.157461882 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.887890100 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.888053894 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.888586044 CET	49808	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.888600111 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.889919996 CET	49808	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.889925003 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.899156094 CET	49807	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.899178028 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.900207996 CET	49807	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.900218010 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.900309086 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.900795937 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.902081966 CET	49809	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.902134895 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.902142048 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.902205944 CET	49810	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.902215004 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.902543068 CET	49810	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.902554989 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.903352022 CET	49809	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.903367043 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.903851986 CET	49806	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.903879881 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:16.904299021 CET	49806	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:16.904304981 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.020559072 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.020787001 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.020884037 CET	49808	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.020971060 CET	49808	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.020971060 CET	49808	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.020987988 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.020996094 CET	443	49808	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.023864985 CET	49811	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.023952007 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.024251938 CET	49811	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.024462938 CET	49811	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.024507046 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.028908968 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.029048920 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.029128075 CET	49810	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.029330969 CET	49810	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.029330969 CET	49810	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.029339075 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.029347897 CET	443	49810	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.031418085 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.031477928 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.031537056 CET	49809	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.031850100 CET	49812	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.031869888 CET	49809	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.031886101 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.031891108 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.031905890 CET	49809	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.031910896 CET	443	49809	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.032015085 CET	49812	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.032109022 CET	49812	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.032123089 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.034307003 CET	49813	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.034339905 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.034410954 CET	49813	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.034526110 CET	49813	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.034537077 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.034548044 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.034764051 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.035072088 CET	49806	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.035140991 CET	49806	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.035150051 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.035161018 CET	49806	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.035164118 CET	443	49806	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.037914038 CET	49814	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.037942886 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.038306952 CET	49814	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.038306952 CET	49814	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.038340092 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.054341078 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.054546118 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.054637909 CET	49807	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.054723024 CET	49807	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.054723024 CET	49807	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.054738998 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.054749966 CET	443	49807	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.057044983 CET	49815	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.057106972 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.057224989 CET	49815	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.057410955 CET	49815	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.057446957 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.765734911 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.766307116 CET	49813	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.766330004 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.766796112 CET	49813	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.766802073 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.771234035 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.771541119 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.771979094 CET	49811	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.772017956 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.772025108 CET	49814	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.772047043 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.772440910 CET	49811	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.772463083 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.772722006 CET	49814	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.772730112 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.776263952 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.776653051 CET	49812	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.776674032 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.777015924 CET	49812	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.777021885 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.821505070 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.822069883 CET	49815	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.822102070 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.822551012 CET	49815	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.822557926 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.898999929 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.899168015 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.899327040 CET	49813	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.899374962 CET	49813	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.899394035 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.899409056 CET	49813	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.899415970 CET	443	49813	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.901737928 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.901921988 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.902204990 CET	49811	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.902297974 CET	49811	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.902331114 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.902359009 CET	49811	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.902374029 CET	443	49811	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.902681112 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.902694941 CET	49816	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.902738094 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.902808905 CET	49816	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.902882099 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.902966976 CET	49814	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.903054953 CET	49816	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.903069973 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.903245926 CET	49814	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.903269053 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.903285980 CET	49814	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.903295994 CET	443	49814	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.905791044 CET	49817	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.905838013 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.906131983 CET	49817	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.906228065 CET	49817	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.906239986 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.906548023 CET	49818	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.906558037 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.906634092 CET	49818	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.906858921 CET	49818	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.906869888 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.908011913 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.908163071 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.908229113 CET	49812	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.908262014 CET	49812	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.908272982 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.908283949 CET	49812	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.908291101 CET	443	49812	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.910329103 CET	49819	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.910356998 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.910541058 CET	49819	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.910751104 CET	49819	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.910775900 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.954365969 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.954561949 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.954632998 CET	49815	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.954817057 CET	49815	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.954833984 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.954847097 CET	49815	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.954854012 CET	443	49815	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.958038092 CET	49820	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.958089113 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:17.958219051 CET	49820	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.958410025 CET	49820	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:17.958424091 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.636488914 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.637227058 CET	49818	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.637244940 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.637919903 CET	49818	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.637924910 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.641534090 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.641911983 CET	49817	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.641943932 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.642347097 CET	49817	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.642354012 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.647577047 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.647878885 CET	49816	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.647887945 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.648400068 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.648545027 CET	49816	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.648550987 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.648891926 CET	49819	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.648900986 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.649323940 CET	49819	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.649329901 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.720874071 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.721371889 CET	49820	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.721414089 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.722012997 CET	49820	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.722019911 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.765213013 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.765515089 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.765580893 CET	49818	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.765634060 CET	49818	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.765647888 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.765656948 CET	49818	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.765661955 CET	443	49818	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.768676043 CET	49821	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.768785954 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.768868923 CET	49821	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.769042015 CET	49821	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.769078970 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.774091959 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.774260998 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.774323940 CET	49817	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.774375916 CET	49817	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.774399996 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.774413109 CET	49817	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.774420023 CET	443	49817	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.776510954 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.776549101 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.776724100 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.776882887 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.776896954 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.779211044 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.779371977 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.779431105 CET	49816	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.779464006 CET	49816	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.779479980 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.779490948 CET	49816	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.779495955 CET	443	49816	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.781594038 CET	49823	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.781622887 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.781688929 CET	49823	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.781807899 CET	49823	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.781831980 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.784315109 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.784446955 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.784569025 CET	49819	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.784605026 CET	49819	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.784605980 CET	49819	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.784625053 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.784646034 CET	443	49819	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.786581039 CET	49824	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.786626101 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.786814928 CET	49824	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.786840916 CET	49824	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.786849976 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.853687048 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.853873968 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.853945971 CET	49820	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.854032993 CET	49820	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.854032993 CET	49820	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.854058027 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.854070902 CET	443	49820	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.856726885 CET	49825	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.856794119 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:18.856870890 CET	49825	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.857115984 CET	49825	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:18.857146978 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.492690086 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.493424892 CET	49821	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.493464947 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.494143963 CET	49821	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.494153976 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.507153988 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.507715940 CET	49823	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.507746935 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.508650064 CET	49823	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.508660078 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.524241924 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.524775028 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.524799109 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.525563955 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.525571108 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.532561064 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.533102989 CET	49824	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.533118963 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.533935070 CET	49824	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.533941031 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.597290039 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.598515034 CET	49825	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.598571062 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.599531889 CET	49825	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.599546909 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.623943090 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.624017000 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.624178886 CET	49821	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.624387980 CET	49821	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.624411106 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.624631882 CET	49821	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.624640942 CET	443	49821	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.631547928 CET	49826	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.631582022 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.631674051 CET	49826	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.632272005 CET	49826	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.632288933 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.638453007 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.638582945 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.638695955 CET	49823	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.640913010 CET	49823	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.640938997 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.640953064 CET	49823	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.640960932 CET	443	49823	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.657401085 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.657495975 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.657555103 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.665050030 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.665080070 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.673458099 CET	49827	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.673516989 CET	443	49827	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.673595905 CET	49827	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.674042940 CET	49827	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.674055099 CET	443	49827	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.676408052 CET	49828	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.676460028 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.676526070 CET	49828	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.676740885 CET	49828	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.676759958 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.676796913 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.676831961 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.677006006 CET	49824	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.677107096 CET	49824	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.677107096 CET	49824	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.677136898 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.677149057 CET	443	49824	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.680766106 CET	49829	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.680788994 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.680932045 CET	49829	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.681072950 CET	49829	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.681086063 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.733222008 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.733376026 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.733441114 CET	49825	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.733731031 CET	49825	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.733763933 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.733782053 CET	49825	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.733791113 CET	443	49825	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.738746881 CET	49830	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.738790989 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:19.738915920 CET	49830	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.739152908 CET	49830	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:19.739166021 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.405949116 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.406541109 CET	49828	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.406563997 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.407056093 CET	49828	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.407063007 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.407712936 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.408078909 CET	49826	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.408087015 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.408452034 CET	49826	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.408456087 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.411621094 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.412003040 CET	49829	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.412014961 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.412410975 CET	49829	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.412415028 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.416596889 CET	443	49827	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.416939974 CET	49827	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.416961908 CET	443	49827	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.417306900 CET	49827	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.417315006 CET	443	49827	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.465176105 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.468280077 CET	49830	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.468301058 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.469033003 CET	49830	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.469042063 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.534953117 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.535043001 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.535146952 CET	49828	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.535624027 CET	49828	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.535643101 CET	443	49828	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.541241884 CET	49831	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.541265965 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.541338921 CET	49831	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.541563034 CET	49831	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.541577101 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.543174982 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.543387890 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.543456078 CET	49829	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.543504953 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.543682098 CET	49829	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.543692112 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.543700933 CET	49829	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.543704987 CET	443	49829	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.543713093 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.543813944 CET	49826	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.543956995 CET	49826	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.543957949 CET	49826	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.543971062 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.543978930 CET	443	49826	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.549560070 CET	443	49827	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.549824953 CET	443	49827	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.550242901 CET	49827	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.550786018 CET	49832	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.550827026 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.550956964 CET	49832	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.551170111 CET	49832	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.551187992 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.551650047 CET	49833	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.551676989 CET	443	49833	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.551743031 CET	49833	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.551987886 CET	49827	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.552015066 CET	443	49827	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.552721024 CET	49833	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.552737951 CET	443	49833	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.556026936 CET	49834	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.556037903 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.556216002 CET	49834	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.560997009 CET	49834	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.561008930 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.593481064 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.593885899 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.593961000 CET	49830	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.594122887 CET	49830	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.594144106 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.594177961 CET	49830	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.594187975 CET	443	49830	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.599736929 CET	49835	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.599754095 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:20.599998951 CET	49835	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.600213051 CET	49835	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:20.600224972 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.281466007 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.282190084 CET	49834	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.282217026 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.282915115 CET	49834	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.282922029 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.283220053 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.284022093 CET	49831	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.284060001 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.284949064 CET	49831	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.284955025 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.293579102 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.294101000 CET	49832	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.294111967 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.294908047 CET	49832	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.294914007 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.302658081 CET	443	49833	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.303184986 CET	49833	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.303227901 CET	443	49833	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.303946972 CET	49833	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.303962946 CET	443	49833	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.335387945 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.335796118 CET	49835	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.335835934 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.336807013 CET	49835	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.336823940 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.411287069 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.411638021 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.411737919 CET	49834	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.411780119 CET	49834	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.411804914 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.411834955 CET	49834	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.411843061 CET	443	49834	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.414480925 CET	49836	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.414542913 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.414613962 CET	49836	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.414768934 CET	49836	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.414786100 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.420273066 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.420852900 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.420913935 CET	49831	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.420947075 CET	49831	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.420959949 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.420984983 CET	49831	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.420989990 CET	443	49831	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.423178911 CET	49837	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.423233032 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.423322916 CET	49837	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.423468113 CET	49837	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.423485994 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.430392027 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.430629969 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.430676937 CET	49832	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.430716038 CET	49832	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.430716991 CET	49832	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.430740118 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.430756092 CET	443	49832	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.432744026 CET	49838	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.432761908 CET	443	49838	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.432818890 CET	49838	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.432943106 CET	49838	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.432955980 CET	443	49838	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.438160896 CET	443	49833	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.438361883 CET	443	49833	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.438472033 CET	49833	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.438472033 CET	49833	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.438539982 CET	49833	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.438570976 CET	443	49833	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.440548897 CET	49839	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.440588951 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.440654993 CET	49839	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.440774918 CET	49839	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.440790892 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.466590881 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.466823101 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.467082977 CET	49835	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.467130899 CET	49835	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.467130899 CET	49835	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.467160940 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.467185974 CET	443	49835	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.468921900 CET	49840	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.468971014 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:21.469125032 CET	49840	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.469268084 CET	49840	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:21.469294071 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.146074057 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.147526979 CET	49836	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.147556067 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.149076939 CET	49836	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.149084091 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.164237022 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.164701939 CET	49837	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.164732933 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.165693998 CET	49837	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.165709972 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.165862083 CET	443	49838	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.166642904 CET	49838	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.166656017 CET	443	49838	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.167473078 CET	49838	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.167476892 CET	443	49838	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.183707952 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.184154987 CET	49839	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.184178114 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.185139894 CET	49839	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.185148001 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.211118937 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.211714983 CET	49840	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.211735964 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.212086916 CET	49840	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.212094069 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.275310993 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.275409937 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.275492907 CET	49836	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.276530981 CET	49836	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.276546001 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.276556015 CET	49836	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.276561022 CET	443	49836	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.283000946 CET	49841	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.283039093 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.283118010 CET	49841	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.283308983 CET	49841	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.283327103 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.294044018 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.294167995 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.294323921 CET	49837	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.294672966 CET	49837	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.294672966 CET	49837	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.294698954 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.294714928 CET	443	49837	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.295813084 CET	443	49838	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.295991898 CET	443	49838	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.296046019 CET	49838	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.296413898 CET	49838	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.296421051 CET	443	49838	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.296430111 CET	49838	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.296432972 CET	443	49838	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.298958063 CET	49842	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.298998117 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.299135923 CET	49842	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.300874949 CET	49842	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.300896883 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.303812981 CET	49843	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.303828001 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.303885937 CET	49843	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.304260969 CET	49843	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.304275036 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.315500975 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.315632105 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.315817118 CET	49839	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.316284895 CET	49839	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.316303968 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.316323042 CET	49839	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.316329956 CET	443	49839	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.340641022 CET	49844	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.340688944 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.340754032 CET	49844	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.343076944 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.343239069 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.343287945 CET	49840	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.351150036 CET	49844	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.351166010 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.361567974 CET	49840	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.361592054 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.361629963 CET	49840	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.361637115 CET	443	49840	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.440937996 CET	49845	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.440983057 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:22.441042900 CET	49845	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.441211939 CET	49845	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:22.441220045 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.009922028 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.010502100 CET	49841	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.010514975 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.010991096 CET	49841	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.010996103 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.024534941 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.024975061 CET	49843	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.024996996 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.025383949 CET	49843	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.025389910 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.048042059 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.048499107 CET	49842	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.048521042 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.048867941 CET	49842	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.048875093 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.095268011 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.101746082 CET	49844	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.101764917 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.102315903 CET	49844	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.102322102 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.139142990 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.139353037 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.139406919 CET	49841	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.139486074 CET	49841	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.139494896 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.139519930 CET	49841	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.139527082 CET	443	49841	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.142484903 CET	49846	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.142537117 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.142604113 CET	49846	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.142771959 CET	49846	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.142796040 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.152533054 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.152627945 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.152734041 CET	49843	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.152755976 CET	49843	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.152761936 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.152792931 CET	49843	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.152796984 CET	443	49843	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.155283928 CET	49847	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.155324936 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.155385017 CET	49847	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.155570030 CET	49847	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.155584097 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.186180115 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.186547041 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.186665058 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.186747074 CET	49842	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.186783075 CET	49842	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.186803102 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.186815977 CET	49842	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.186822891 CET	443	49842	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.187045097 CET	49845	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.187061071 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.187488079 CET	49845	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.187491894 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.189253092 CET	49848	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.189327002 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.189428091 CET	49848	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.189582109 CET	49848	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.189609051 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.230248928 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.230463028 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.230520010 CET	49844	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.230551958 CET	49844	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.230561972 CET	443	49844	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.232764959 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.232800961 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.233175039 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.233175039 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.233210087 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.317080021 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.317312956 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.317389965 CET	49845	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.317919016 CET	49845	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.317928076 CET	443	49845	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.327271938 CET	49850	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.327341080 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.327445030 CET	49850	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.327850103 CET	49850	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.327876091 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.883131981 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.883721113 CET	49846	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.883793116 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.884231091 CET	49846	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.884252071 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.897737026 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.898272991 CET	49847	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.898299932 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.898705959 CET	49847	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.898710966 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.927192926 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.927911997 CET	49848	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.927962065 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.928317070 CET	49848	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.928333044 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.986015081 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.986701965 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.986715078 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:23.987169981 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:23.987174988 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.017329931 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.017452002 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.017525911 CET	49846	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.017724991 CET	49846	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.017746925 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.017762899 CET	49846	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.017771006 CET	443	49846	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.021440029 CET	49852	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.021475077 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.021550894 CET	49852	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.021794081 CET	49852	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.021801949 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.027968884 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.028126955 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.028194904 CET	49847	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.028245926 CET	49847	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.028256893 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.028296947 CET	49847	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.028302908 CET	443	49847	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.031637907 CET	49853	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.031662941 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.031740904 CET	49853	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.031925917 CET	49853	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.031940937 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.057578087 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.057837963 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.058146000 CET	49848	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.058257103 CET	49848	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.058257103 CET	49848	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.058305025 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.058310986 CET	443	49848	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.061115980 CET	49854	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.061136007 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.061207056 CET	49854	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.061453104 CET	49854	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.061464071 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.063733101 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.064273119 CET	49850	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.064312935 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.064706087 CET	49850	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.064718008 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.118880033 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.119049072 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.119159937 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.119263887 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.119271040 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.119333029 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.119338989 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.123100042 CET	49855	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.123126030 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.123192072 CET	49855	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.123821020 CET	49855	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.123841047 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.193535089 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.193726063 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.193819046 CET	49850	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.194113970 CET	49850	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.194113970 CET	49850	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.194163084 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.194190025 CET	443	49850	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.198379993 CET	49856	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.198409081 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.198491096 CET	49856	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.198791027 CET	49856	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.198812008 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.771047115 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.771661997 CET	49852	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.771691084 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.772152901 CET	49852	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.772167921 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.773843050 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.774319887 CET	49853	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.774341106 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.774921894 CET	49853	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.774929047 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.809396982 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.810197115 CET	49854	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.810231924 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.811057091 CET	49854	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.811067104 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.866765976 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.867352962 CET	49855	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.867377043 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.867964029 CET	49855	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.867973089 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.903125048 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.903184891 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.903454065 CET	49852	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.903454065 CET	49852	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.903496981 CET	49852	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.903517008 CET	443	49852	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.906646013 CET	49857	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.906671047 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.906744003 CET	49857	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.906924009 CET	49857	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.906934977 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.945705891 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.945770025 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.945846081 CET	49854	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.945986986 CET	49854	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.946005106 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.946013927 CET	49854	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.946018934 CET	443	49854	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.950499058 CET	49858	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.950531960 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.950664043 CET	49858	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.951031923 CET	49858	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:24.951050043 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.999567032 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:24.999924898 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.000000000 CET	49855	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.000032902 CET	49855	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.000047922 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.000063896 CET	49855	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.000067949 CET	443	49855	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.002660036 CET	49859	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.002688885 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.002763987 CET	49859	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.002916098 CET	49859	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.002927065 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.040422916 CET	49724	80	192.168.2.4	93.184.221.240
Oct 28, 2024 02:07:25.046053886 CET	80	49724	93.184.221.240	192.168.2.4
Oct 28, 2024 02:07:25.046108007 CET	49724	80	192.168.2.4	93.184.221.240
Oct 28, 2024 02:07:25.135411978 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.136085987 CET	49856	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.136099100 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.136529922 CET	49856	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.136534929 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.210731030 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.210813046 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.210990906 CET	49853	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.211180925 CET	49853	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.211195946 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.211206913 CET	49853	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.211211920 CET	443	49853	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.214616060 CET	49860	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.214652061 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.214765072 CET	49860	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.214996099 CET	49860	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.215015888 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.267432928 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.267560959 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.267704964 CET	49856	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.267865896 CET	49856	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.267865896 CET	49856	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.267880917 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.267890930 CET	443	49856	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.270701885 CET	49861	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.270755053 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.270961046 CET	49861	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.271132946 CET	49861	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.271150112 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.680303097 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.680902004 CET	49857	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.680922031 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.681502104 CET	49857	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.681509018 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.690258980 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.690627098 CET	49858	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.690649033 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.691056967 CET	49858	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.691062927 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.731795073 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.732201099 CET	49859	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.732217073 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.732738018 CET	49859	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.732743025 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.820307016 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.820374966 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.820449114 CET	49857	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.820683002 CET	49857	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.820698977 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.820709944 CET	49857	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.820717096 CET	443	49857	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.823833942 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.824136019 CET	49862	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.824162006 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.824239969 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.824320078 CET	49862	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.824326038 CET	49858	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.824424028 CET	49858	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.824424028 CET	49858	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.824440956 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.824453115 CET	443	49858	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.824574947 CET	49862	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.824593067 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.826819897 CET	49863	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.826885939 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.827039003 CET	49863	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.827156067 CET	49863	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.827188015 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.866525888 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.866616011 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.866698980 CET	49859	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.869673014 CET	49859	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.869688988 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.869723082 CET	49859	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.869726896 CET	443	49859	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.873758078 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.873800993 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.874123096 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.874313116 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.874326944 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.943386078 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.943981886 CET	49860	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.943996906 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:25.944659948 CET	49860	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:25.944665909 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.018768072 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.019339085 CET	49861	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.019382954 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.019925117 CET	49861	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.019937038 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.072304010 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.072422981 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.072494030 CET	49860	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.072732925 CET	49860	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.072732925 CET	49860	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.072751045 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.072762012 CET	443	49860	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.075985909 CET	49865	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.076013088 CET	443	49865	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.076081038 CET	49865	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.076272011 CET	49865	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.076282978 CET	443	49865	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.151282072 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.151459932 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.151531935 CET	49861	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.155085087 CET	49861	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.155126095 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.155153990 CET	49861	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.155169010 CET	443	49861	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.158250093 CET	49866	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.158282995 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.158340931 CET	49866	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.158632040 CET	49866	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.158646107 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.237778902 CET	52368	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:07:26.243159056 CET	53	52368	1.1.1.1	192.168.2.4
Oct 28, 2024 02:07:26.243247032 CET	52368	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:07:26.243304968 CET	52368	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:07:26.248986006 CET	53	52368	1.1.1.1	192.168.2.4
Oct 28, 2024 02:07:26.556543112 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.558839083 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.563359976 CET	49862	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.563374996 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.563373089 CET	49863	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.563431025 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.564168930 CET	49862	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.564178944 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.564404964 CET	49863	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.564419985 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.628365993 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.628947020 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.628968000 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.629558086 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.629563093 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.767849922 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.767923117 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.768076897 CET	49862	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.768294096 CET	49862	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.768309116 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.768349886 CET	49862	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.768357038 CET	443	49862	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.768464088 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.768527031 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.768656015 CET	49863	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.768717051 CET	49863	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.768750906 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.768776894 CET	49863	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.768791914 CET	443	49863	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.772609949 CET	52369	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.772634029 CET	443	52369	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.772877932 CET	52369	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.773041010 CET	52369	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.773055077 CET	443	52369	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.773140907 CET	52370	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.773169041 CET	443	52370	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.773236036 CET	52370	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.773452997 CET	52370	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:26.773463964 CET	443	52370	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:26.957587004 CET	53	52368	1.1.1.1	192.168.2.4
Oct 28, 2024 02:07:26.958821058 CET	52368	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:07:26.968671083 CET	53	52368	1.1.1.1	192.168.2.4
Oct 28, 2024 02:07:26.968736887 CET	52368	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:07:27.078480005 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.079052925 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.079114914 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.079176903 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.079195023 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.079210997 CET	49864	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.079217911 CET	443	49864	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.082226992 CET	52372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.082283974 CET	443	52372	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.082364082 CET	52372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.082557917 CET	52372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.082576036 CET	443	52372	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.087836027 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.088309050 CET	49866	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.088324070 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.089025021 CET	49866	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.089030981 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.089553118 CET	443	49865	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.089941025 CET	49865	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.089958906 CET	443	49865	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.090527058 CET	49865	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.090538025 CET	443	49865	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.415518045 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.416779995 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.416887999 CET	49866	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.416928053 CET	49866	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.416944981 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.416958094 CET	49866	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.416965008 CET	443	49866	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.419909954 CET	52373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.419938087 CET	443	52373	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.420145988 CET	52373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.420383930 CET	52373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.420399904 CET	443	52373	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.424901962 CET	443	49865	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.425055981 CET	443	49865	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.425141096 CET	49865	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.425189018 CET	49865	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.425189018 CET	49865	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.425224066 CET	443	49865	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.425249100 CET	443	49865	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.427356005 CET	52374	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.427406073 CET	443	52374	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.427576065 CET	52374	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.427795887 CET	52374	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.427809954 CET	443	52374	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.686952114 CET	443	52369	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.687465906 CET	52369	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.687479019 CET	443	52369	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.688127995 CET	52369	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.688133001 CET	443	52369	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.690685987 CET	443	52370	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.691013098 CET	52370	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.691045046 CET	443	52370	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.691540003 CET	52370	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.691546917 CET	443	52370	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.820560932 CET	443	52369	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.820779085 CET	443	52369	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.820839882 CET	52369	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.820868015 CET	52369	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.820883036 CET	443	52369	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.820894003 CET	52369	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.820899010 CET	443	52369	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.824059010 CET	52375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.824100018 CET	443	52375	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.824237108 CET	52375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.824403048 CET	52375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.824413061 CET	443	52375	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.824399948 CET	443	52370	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.824628115 CET	443	52370	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.824920893 CET	52370	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.824956894 CET	52370	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.824956894 CET	52370	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.824976921 CET	443	52370	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.824990034 CET	443	52370	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.827455044 CET	52376	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.827523947 CET	443	52376	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:27.827699900 CET	52376	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.827847004 CET	52376	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:27.827879906 CET	443	52376	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.042577982 CET	49735	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:07:28.042660952 CET	443	49735	40.99.149.98	192.168.2.4
Oct 28, 2024 02:07:28.042722940 CET	49735	443	192.168.2.4	40.99.149.98
Oct 28, 2024 02:07:28.043015003 CET	52377	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:07:28.043054104 CET	443	52377	142.250.74.196	192.168.2.4
Oct 28, 2024 02:07:28.043122053 CET	52377	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:07:28.044006109 CET	52377	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:07:28.044018984 CET	443	52377	142.250.74.196	192.168.2.4
Oct 28, 2024 02:07:28.160830975 CET	443	52373	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.161420107 CET	52373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.161442041 CET	443	52373	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.162059069 CET	52373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.162066936 CET	443	52373	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.162250042 CET	443	52374	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.162570000 CET	52374	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.162604094 CET	443	52374	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.163009882 CET	52374	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.163022041 CET	443	52374	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.288398027 CET	443	52373	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.288638115 CET	443	52373	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.288713932 CET	52373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.288762093 CET	52373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.288762093 CET	52373	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.288800955 CET	443	52373	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.288814068 CET	443	52373	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.292486906 CET	52378	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.292572975 CET	443	52378	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.292664051 CET	52378	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.292882919 CET	52378	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.292917013 CET	443	52378	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.328706980 CET	443	52374	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.328895092 CET	443	52374	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.328991890 CET	52374	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.329077959 CET	52374	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.329077959 CET	52374	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.329113007 CET	443	52374	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.329138994 CET	443	52374	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.331526995 CET	52379	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.331538916 CET	443	52379	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.331628084 CET	52379	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.331773043 CET	52379	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.331784964 CET	443	52379	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.580904961 CET	443	52376	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.581548929 CET	52376	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.581592083 CET	443	52376	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.582148075 CET	52376	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.582161903 CET	443	52376	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.585156918 CET	443	52375	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.585558891 CET	52375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.585596085 CET	443	52375	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.586251020 CET	52375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.586258888 CET	443	52375	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.714035988 CET	443	52376	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.714111090 CET	443	52376	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.714237928 CET	52376	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.714576960 CET	52376	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.714617968 CET	443	52376	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.714647055 CET	52376	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.714662075 CET	443	52376	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.718350887 CET	52380	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.718410969 CET	443	52380	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.718478918 CET	52380	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.718712091 CET	52380	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.718724966 CET	443	52380	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.721194029 CET	443	52375	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.721210957 CET	443	52375	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.721257925 CET	52375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.721283913 CET	443	52375	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.721297979 CET	443	52375	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.721352100 CET	52375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.721453905 CET	52375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.721472979 CET	443	52375	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.721484900 CET	52375	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.721492052 CET	443	52375	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.723999023 CET	52381	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.724030018 CET	443	52381	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:28.724229097 CET	52381	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.724395037 CET	52381	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:28.724411011 CET	443	52381	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.100483894 CET	443	52377	142.250.74.196	192.168.2.4
Oct 28, 2024 02:07:29.100915909 CET	52377	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:07:29.100929022 CET	443	52377	142.250.74.196	192.168.2.4
Oct 28, 2024 02:07:29.101264954 CET	443	52377	142.250.74.196	192.168.2.4
Oct 28, 2024 02:07:29.101609945 CET	52377	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:07:29.101675987 CET	443	52377	142.250.74.196	192.168.2.4
Oct 28, 2024 02:07:29.150238991 CET	52377	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:07:29.232419968 CET	443	52372	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.232986927 CET	52372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.233022928 CET	443	52372	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.233480930 CET	52372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.233486891 CET	443	52372	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.235044003 CET	443	52378	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.235402107 CET	52378	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.235431910 CET	443	52378	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.235430956 CET	443	52379	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.235768080 CET	52378	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.235776901 CET	443	52378	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.235876083 CET	52379	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.235884905 CET	443	52379	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.236259937 CET	52379	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.236264944 CET	443	52379	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.362509966 CET	443	52372	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.362751961 CET	443	52372	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.362921000 CET	52372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.362978935 CET	52372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.362993002 CET	443	52372	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.363008976 CET	52372	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.363013983 CET	443	52372	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.363631010 CET	443	52378	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.363831043 CET	443	52378	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.363931894 CET	52378	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.363991022 CET	52378	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.364011049 CET	443	52378	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.364031076 CET	52378	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.364038944 CET	443	52378	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.365299940 CET	443	52379	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.365380049 CET	443	52379	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.365575075 CET	443	52379	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.365644932 CET	52379	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.365644932 CET	52379	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.365814924 CET	52379	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.365828991 CET	443	52379	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.365844965 CET	52379	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.365850925 CET	443	52379	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.366477013 CET	52382	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.366507053 CET	443	52382	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.366574049 CET	52382	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.367285967 CET	52383	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.367305994 CET	443	52383	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.367383003 CET	52382	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.367397070 CET	443	52382	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.367415905 CET	52383	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.368422031 CET	52383	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.368438959 CET	443	52383	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.369488001 CET	52384	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.369509935 CET	443	52384	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.369589090 CET	52384	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.369693995 CET	52384	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.369713068 CET	443	52384	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.481451035 CET	443	52380	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.481997967 CET	52380	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.482032061 CET	443	52380	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.482500076 CET	52380	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.482506990 CET	443	52380	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.491538048 CET	443	52381	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.491878986 CET	52381	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.491890907 CET	443	52381	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.492271900 CET	52381	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.492275953 CET	443	52381	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.618890047 CET	443	52380	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.618915081 CET	443	52380	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.618974924 CET	52380	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.618983984 CET	443	52380	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.619048119 CET	52380	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.619452953 CET	52380	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.619473934 CET	443	52380	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.627578020 CET	443	52381	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.627604961 CET	443	52381	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.627669096 CET	443	52381	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.627669096 CET	52381	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.627716064 CET	52381	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.628771067 CET	52385	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.628798962 CET	443	52385	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.628858089 CET	52385	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.629234076 CET	52381	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.629246950 CET	443	52381	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.630688906 CET	52385	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.630702972 CET	443	52385	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.632441998 CET	52386	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.632477045 CET	443	52386	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:29.632698059 CET	52386	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.632882118 CET	52386	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:29.632896900 CET	443	52386	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.100029945 CET	443	52382	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.100598097 CET	52382	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.100626945 CET	443	52382	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.101077080 CET	52382	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.101083040 CET	443	52382	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.105443954 CET	443	52384	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.105859995 CET	52384	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.105875969 CET	443	52384	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.106268883 CET	52384	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.106273890 CET	443	52384	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.150603056 CET	443	52383	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.151412010 CET	52383	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.151433945 CET	443	52383	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.151954889 CET	52383	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.151958942 CET	443	52383	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.230947018 CET	443	52382	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.231128931 CET	443	52382	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.231239080 CET	52382	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.231323004 CET	52382	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.231340885 CET	443	52382	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.231362104 CET	52382	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.231369019 CET	443	52382	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.234431028 CET	52387	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.234468937 CET	443	52387	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.234639883 CET	52387	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.234814882 CET	52387	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.234827042 CET	443	52387	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.281368971 CET	443	52383	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.281806946 CET	443	52383	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.281963110 CET	52383	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.281963110 CET	52383	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.282016039 CET	52383	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.282027006 CET	443	52383	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.284904957 CET	52388	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.284946918 CET	443	52388	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.285161972 CET	52388	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.285161972 CET	52388	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.285221100 CET	443	52388	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.345056057 CET	443	52384	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.345244884 CET	443	52384	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.345515966 CET	52384	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.345516920 CET	52384	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.345635891 CET	52384	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.345649958 CET	443	52384	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.348680973 CET	52389	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.348751068 CET	443	52389	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.348885059 CET	52389	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.349015951 CET	52389	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.349033117 CET	443	52389	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.355762005 CET	443	52386	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.356635094 CET	52386	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.356635094 CET	52386	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.356662989 CET	443	52386	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.356671095 CET	443	52386	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.375957012 CET	443	52385	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.376713991 CET	52385	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.376713991 CET	52385	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.376744032 CET	443	52385	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.376756907 CET	443	52385	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.483253956 CET	443	52386	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.483417988 CET	443	52386	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.483611107 CET	52386	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.483611107 CET	52386	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.483653069 CET	52386	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.483671904 CET	443	52386	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.486476898 CET	52390	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.486578941 CET	443	52390	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.486835003 CET	52390	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.486913919 CET	52390	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.486931086 CET	443	52390	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.509582043 CET	443	52385	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.509644985 CET	443	52385	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.509753942 CET	52385	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.509949923 CET	52385	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.509964943 CET	443	52385	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.509995937 CET	52385	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.510001898 CET	443	52385	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.512495995 CET	52391	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.512520075 CET	443	52391	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.512736082 CET	52391	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.512883902 CET	52391	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.512897015 CET	443	52391	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.979353905 CET	443	52387	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.979995966 CET	52387	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.980025053 CET	443	52387	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:30.981487989 CET	52387	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:30.981493950 CET	443	52387	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.025233030 CET	443	52388	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.026176929 CET	52388	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.026236057 CET	443	52388	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.027447939 CET	52388	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.027462006 CET	443	52388	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.083220959 CET	443	52389	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.087479115 CET	52389	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.087479115 CET	52389	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.087524891 CET	443	52389	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.087543964 CET	443	52389	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.112200022 CET	443	52387	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.112268925 CET	443	52387	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.113491058 CET	52387	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.120290041 CET	52387	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.120305061 CET	443	52387	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.120338917 CET	52387	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.120346069 CET	443	52387	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.133790970 CET	52392	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.133861065 CET	443	52392	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.134896994 CET	52392	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.135298014 CET	52392	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.135335922 CET	443	52392	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.159499884 CET	443	52388	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.159579039 CET	443	52388	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.164226055 CET	52388	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.164226055 CET	52388	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.164226055 CET	52388	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.194623947 CET	52393	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.194660902 CET	443	52393	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.197621107 CET	52393	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.200556993 CET	52393	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.200570107 CET	443	52393	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.214067936 CET	443	52389	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.214641094 CET	443	52389	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.218966961 CET	443	52390	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.219141006 CET	52389	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.221158981 CET	52389	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.221158981 CET	52389	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.221194983 CET	443	52389	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.221205950 CET	443	52389	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.233567953 CET	52390	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.233578920 CET	443	52390	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.237946987 CET	443	52391	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.242474079 CET	52390	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.242492914 CET	443	52390	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.245480061 CET	52391	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.245516062 CET	443	52391	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.247884989 CET	52391	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.247894049 CET	443	52391	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.266571999 CET	52394	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.266666889 CET	443	52394	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.269799948 CET	52394	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.270081043 CET	52394	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.270121098 CET	443	52394	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.372021914 CET	443	52391	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.372097015 CET	443	52391	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.372152090 CET	52391	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.372507095 CET	52391	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.372536898 CET	443	52391	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.372555017 CET	52391	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.372564077 CET	443	52391	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.373852968 CET	443	52390	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.373948097 CET	443	52390	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.374058962 CET	52390	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.374347925 CET	52390	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.374361038 CET	443	52390	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.374389887 CET	52390	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.374394894 CET	443	52390	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.377348900 CET	52395	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.377377033 CET	443	52395	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.377461910 CET	52395	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.378060102 CET	52396	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.378106117 CET	443	52396	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.378314018 CET	52396	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.378563881 CET	52396	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.378581047 CET	443	52396	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.378659964 CET	52395	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.378674030 CET	443	52395	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.462470055 CET	52388	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.462515116 CET	443	52388	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.883263111 CET	443	52392	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.883908033 CET	52392	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.883970022 CET	443	52392	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.884588957 CET	52392	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.884603024 CET	443	52392	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.943052053 CET	443	52393	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.943715096 CET	52393	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.943727970 CET	443	52393	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:31.944284916 CET	52393	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:31.944291115 CET	443	52393	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.016676903 CET	443	52392	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.016771078 CET	443	52392	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.016880035 CET	443	52392	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.016891956 CET	52392	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.016947985 CET	52392	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.017242908 CET	52392	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.017283916 CET	443	52392	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.017316103 CET	52392	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.017330885 CET	443	52392	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.017537117 CET	443	52394	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.019360065 CET	52394	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.019380093 CET	443	52394	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.020036936 CET	52394	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.020049095 CET	443	52394	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.021950960 CET	52397	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.021975994 CET	443	52397	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.022378922 CET	52397	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.022553921 CET	52397	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.022563934 CET	443	52397	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.245434999 CET	443	52393	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.245532990 CET	443	52393	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.245620012 CET	52393	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.245930910 CET	52393	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.245930910 CET	52393	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.245948076 CET	443	52393	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.245958090 CET	443	52393	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.248018026 CET	443	52395	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.248688936 CET	52395	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.248697996 CET	443	52395	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.249469995 CET	52395	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.249474049 CET	443	52395	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.250238895 CET	52398	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.250289917 CET	443	52398	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.250390053 CET	52398	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.250579119 CET	52398	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.250592947 CET	443	52398	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.252269983 CET	443	52396	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.252705097 CET	52396	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.252726078 CET	443	52396	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.253243923 CET	52396	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.253251076 CET	443	52396	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.368324995 CET	443	52394	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.368484974 CET	443	52394	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.368566990 CET	52394	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.368592978 CET	443	52394	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.368716955 CET	52394	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.383225918 CET	443	52396	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.383482933 CET	443	52396	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.383543015 CET	52396	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.384603024 CET	443	52395	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.384722948 CET	443	52395	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.384812117 CET	52395	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.411333084 CET	52394	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.411386013 CET	443	52394	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.415160894 CET	52395	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.415173054 CET	443	52395	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.417764902 CET	52396	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.417798996 CET	443	52396	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.417829037 CET	52396	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.417836905 CET	443	52396	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.424288988 CET	52399	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.424319029 CET	443	52399	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.424448967 CET	52399	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.429308891 CET	52400	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.429328918 CET	443	52400	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.429750919 CET	52400	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.429902077 CET	52399	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.429919004 CET	443	52399	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.432938099 CET	52400	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.432954073 CET	443	52400	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.435884953 CET	52401	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.435956955 CET	443	52401	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.436048985 CET	52401	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.436248064 CET	52401	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.436280966 CET	443	52401	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.982542992 CET	443	52397	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.983145952 CET	52397	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.983155012 CET	443	52397	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.984173059 CET	52397	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.984178066 CET	443	52397	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.994342089 CET	443	52398	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:32.999031067 CET	52398	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:32.999087095 CET	443	52398	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.000473976 CET	52398	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.000483990 CET	443	52398	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.115926981 CET	443	52397	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.116103888 CET	443	52397	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.116189003 CET	52397	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.121066093 CET	52397	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.121078968 CET	443	52397	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.121090889 CET	52397	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.121097088 CET	443	52397	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.126768112 CET	52402	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.126794100 CET	443	52402	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.126933098 CET	52402	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.127520084 CET	52402	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.127545118 CET	443	52402	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.130197048 CET	443	52398	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.130280018 CET	443	52398	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.130327940 CET	443	52398	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.130333900 CET	52398	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.130369902 CET	52398	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.130826950 CET	52398	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.130850077 CET	443	52398	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.130860090 CET	52398	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.130866051 CET	443	52398	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.133829117 CET	52403	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.133928061 CET	443	52403	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.134021044 CET	52403	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.134258986 CET	52403	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.134291887 CET	443	52403	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.169792891 CET	443	52401	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.170716047 CET	52401	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.170788050 CET	443	52401	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.171411037 CET	52401	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.171426058 CET	443	52401	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.191907883 CET	443	52400	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.192576885 CET	52400	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.192599058 CET	443	52400	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.193648100 CET	52400	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.193653107 CET	443	52400	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.211635113 CET	443	52399	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.212409973 CET	52399	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.212428093 CET	443	52399	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.213097095 CET	52399	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.213100910 CET	443	52399	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.302601099 CET	443	52401	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.302756071 CET	443	52401	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.302858114 CET	52401	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.305412054 CET	52401	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.305455923 CET	443	52401	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.312448978 CET	52404	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.312478065 CET	443	52404	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.312602043 CET	52404	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.313045979 CET	52404	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.313057899 CET	443	52404	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.330534935 CET	443	52400	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.330686092 CET	443	52400	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.330754042 CET	52400	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.330993891 CET	52400	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.331017017 CET	443	52400	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.339359045 CET	52405	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.339409113 CET	443	52405	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.339502096 CET	52405	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.340079069 CET	52405	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.340092897 CET	443	52405	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.353224039 CET	443	52399	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.353295088 CET	443	52399	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.353363037 CET	52399	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.373713970 CET	52399	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.373738050 CET	443	52399	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.373749018 CET	52399	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.373753071 CET	443	52399	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.546437979 CET	52406	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.546466112 CET	443	52406	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.546566963 CET	52406	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.550077915 CET	52406	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.550090075 CET	443	52406	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.867198944 CET	443	52402	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.874564886 CET	52402	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.874577045 CET	443	52402	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.875148058 CET	443	52403	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.879018068 CET	52402	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.879023075 CET	443	52402	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.883449078 CET	52403	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.883498907 CET	443	52403	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:33.888293028 CET	52403	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:33.888314962 CET	443	52403	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.008532047 CET	443	52402	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.008605957 CET	443	52402	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.008714914 CET	443	52402	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.008718014 CET	52402	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.008824110 CET	52402	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.011826992 CET	52402	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.011853933 CET	443	52402	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.011864901 CET	52402	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.011872053 CET	443	52402	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.015836954 CET	52407	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.015858889 CET	443	52407	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.015928984 CET	52407	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.016191006 CET	52407	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.016206026 CET	443	52407	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.018219948 CET	443	52403	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.018306017 CET	443	52403	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.018376112 CET	52403	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.018826008 CET	52403	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.018853903 CET	443	52403	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.022814989 CET	52408	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.022839069 CET	443	52408	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.023164034 CET	52408	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.023324966 CET	52408	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.023335934 CET	443	52408	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.059217930 CET	443	52404	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.060733080 CET	52404	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.060741901 CET	443	52404	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.061194897 CET	52404	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.061198950 CET	443	52404	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.080224991 CET	443	52405	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.080768108 CET	52405	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.080785990 CET	443	52405	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.081301928 CET	52405	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.081310034 CET	443	52405	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.191299915 CET	443	52404	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.191373110 CET	443	52404	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.191437006 CET	443	52404	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.191488981 CET	52404	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.191530943 CET	52404	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.191766024 CET	52404	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.191766024 CET	52404	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.191786051 CET	443	52404	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.191795111 CET	443	52404	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.195081949 CET	52409	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.195130110 CET	443	52409	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.195225954 CET	52409	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.195372105 CET	52409	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.195386887 CET	443	52409	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.208914042 CET	443	52405	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.209167957 CET	443	52405	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.209254980 CET	52405	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.209378004 CET	52405	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.209393024 CET	443	52405	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.209403038 CET	52405	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.209408998 CET	443	52405	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.221695900 CET	52410	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.221734047 CET	443	52410	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.221951962 CET	52410	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.222512007 CET	52410	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.222531080 CET	443	52410	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.288269997 CET	443	52406	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.304164886 CET	52406	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.304183960 CET	443	52406	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.330514908 CET	52406	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.330523968 CET	443	52406	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.458684921 CET	443	52406	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.458780050 CET	443	52406	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.458848953 CET	52406	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.459120989 CET	52406	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.459139109 CET	443	52406	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.459150076 CET	52406	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.459156036 CET	443	52406	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.467490911 CET	52411	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.467531919 CET	443	52411	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.467597008 CET	52411	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.468297958 CET	52411	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.468312025 CET	443	52411	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.767118931 CET	443	52407	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.768244028 CET	52407	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.768260956 CET	443	52407	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.769645929 CET	52407	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.769651890 CET	443	52407	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.790669918 CET	443	52408	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.808931112 CET	52408	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.808959007 CET	443	52408	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.810291052 CET	52408	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.810297012 CET	443	52408	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.899996042 CET	443	52407	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.900072098 CET	443	52407	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.900122881 CET	52407	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.901365995 CET	52407	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.901386976 CET	443	52407	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.901400089 CET	52407	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.901405096 CET	443	52407	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.908685923 CET	52412	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.908716917 CET	443	52412	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.908775091 CET	52412	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.909233093 CET	52412	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.909244061 CET	443	52412	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.927651882 CET	443	52409	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.928266048 CET	52409	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.928287983 CET	443	52409	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.929469109 CET	52409	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.929476023 CET	443	52409	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.943473101 CET	443	52408	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.943521023 CET	443	52408	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.943564892 CET	443	52408	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.943568945 CET	52408	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.943605900 CET	52408	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.943780899 CET	52408	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.943799973 CET	443	52408	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.943809986 CET	52408	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.943815947 CET	443	52408	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.948966980 CET	52413	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.949024916 CET	443	52413	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.949098110 CET	52413	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.949305058 CET	52413	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.949335098 CET	443	52413	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.969764948 CET	443	52410	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.970451117 CET	52410	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.970462084 CET	443	52410	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:34.971698046 CET	52410	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:34.971703053 CET	443	52410	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.057441950 CET	443	52409	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.057522058 CET	443	52409	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.057583094 CET	52409	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.058306932 CET	52409	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.058326960 CET	443	52409	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.058340073 CET	52409	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.058347940 CET	443	52409	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.067609072 CET	52414	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.067627907 CET	443	52414	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.067692995 CET	52414	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.068357944 CET	52414	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.068368912 CET	443	52414	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.101705074 CET	443	52410	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.101893902 CET	443	52410	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.101948977 CET	52410	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.102214098 CET	52410	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.102232933 CET	443	52410	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.102242947 CET	52410	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.102247953 CET	443	52410	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.108239889 CET	52415	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.108279943 CET	443	52415	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.108365059 CET	52415	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.108807087 CET	52415	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.108828068 CET	443	52415	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.212471008 CET	443	52411	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.220158100 CET	52411	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.220171928 CET	443	52411	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.220715046 CET	52411	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.220721960 CET	443	52411	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.352818966 CET	443	52411	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.353144884 CET	443	52411	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.353202105 CET	52411	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.353374958 CET	52411	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.353391886 CET	443	52411	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.353415012 CET	52411	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.353421926 CET	443	52411	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.360028028 CET	52416	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.360075951 CET	443	52416	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.360306978 CET	52416	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.360618114 CET	52416	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.360645056 CET	443	52416	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.645638943 CET	443	52412	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.646253109 CET	52412	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.646284103 CET	443	52412	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.646851063 CET	52412	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.646856070 CET	443	52412	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.707984924 CET	443	52413	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.708617926 CET	52413	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.708652020 CET	443	52413	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.709230900 CET	52413	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.709235907 CET	443	52413	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.806830883 CET	443	52412	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.806864023 CET	443	52412	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.806926966 CET	443	52412	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.806942940 CET	52412	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.806992054 CET	52412	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.807353973 CET	52412	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.807353973 CET	52412	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.807372093 CET	443	52412	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.807384968 CET	443	52412	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.811384916 CET	52417	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.811408997 CET	443	52417	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.814522982 CET	52417	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.818099976 CET	443	52414	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.820800066 CET	52417	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.820811987 CET	443	52417	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.821048021 CET	52414	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.821055889 CET	443	52414	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.821577072 CET	52414	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.821582079 CET	443	52414	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.843841076 CET	443	52413	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.843945026 CET	443	52413	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.844012976 CET	52413	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.844243050 CET	52413	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.844291925 CET	443	52413	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.844326019 CET	52413	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.844345093 CET	443	52413	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.847341061 CET	52418	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.847384930 CET	443	52418	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.847460985 CET	52418	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.847604036 CET	52418	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.847652912 CET	443	52418	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.864442110 CET	443	52415	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.864909887 CET	52415	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.864927053 CET	443	52415	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.865402937 CET	52415	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.865417957 CET	443	52415	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.945929050 CET	443	52414	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.946001053 CET	443	52414	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.946064949 CET	52414	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.946813107 CET	52414	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.946820021 CET	443	52414	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.946897030 CET	52414	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.946902990 CET	443	52414	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.971725941 CET	52419	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.971738100 CET	443	52419	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.971802950 CET	52419	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.972702980 CET	52419	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.972713947 CET	443	52419	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.993643999 CET	443	52415	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.993814945 CET	443	52415	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.993904114 CET	52415	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.995001078 CET	52415	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.995014906 CET	443	52415	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:35.995060921 CET	52415	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:35.995073080 CET	443	52415	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.004916906 CET	52420	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.004940987 CET	443	52420	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.005132914 CET	52420	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.005589008 CET	52420	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.005604982 CET	443	52420	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.108761072 CET	443	52416	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.109677076 CET	52416	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.109704971 CET	443	52416	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.110872030 CET	52416	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.110884905 CET	443	52416	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.246035099 CET	443	52416	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.246064901 CET	443	52416	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.246118069 CET	443	52416	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.246130943 CET	52416	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.246196032 CET	52416	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.246653080 CET	52416	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.246671915 CET	443	52416	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.251403093 CET	52421	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.251430988 CET	443	52421	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.251589060 CET	52421	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.251952887 CET	52421	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.251962900 CET	443	52421	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.580276012 CET	443	52418	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.581228018 CET	52418	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.581273079 CET	443	52418	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.582065105 CET	52418	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.582077980 CET	443	52418	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.634526014 CET	443	52417	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.635344982 CET	52417	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.635354042 CET	443	52417	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.636194944 CET	52417	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.636203051 CET	443	52417	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.714286089 CET	443	52419	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.715080976 CET	52419	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.715101004 CET	443	52419	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.715941906 CET	52419	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.715948105 CET	443	52419	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.718477964 CET	443	52418	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.718542099 CET	443	52418	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.718750954 CET	52418	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.719170094 CET	52418	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.719192028 CET	443	52418	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.719228029 CET	52418	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.719240904 CET	443	52418	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.724673033 CET	52422	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.724709034 CET	443	52422	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.724782944 CET	52422	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.724972963 CET	52422	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.724987030 CET	443	52422	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.747817993 CET	443	52420	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.748282909 CET	52420	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.748292923 CET	443	52420	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.749048948 CET	52420	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.749053001 CET	443	52420	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.763099909 CET	443	52417	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.763240099 CET	443	52417	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.763453960 CET	52417	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.763542891 CET	52417	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.763556004 CET	443	52417	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.763566971 CET	52417	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.763571978 CET	443	52417	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.774117947 CET	52423	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.774163008 CET	443	52423	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.774221897 CET	52423	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.774631023 CET	52423	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.774652004 CET	443	52423	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.850347042 CET	443	52419	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.850862980 CET	443	52419	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.851243019 CET	52419	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.853209972 CET	52419	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.853220940 CET	443	52419	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.853231907 CET	52419	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.853235960 CET	443	52419	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.860909939 CET	52424	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.860930920 CET	443	52424	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.861006021 CET	52424	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.861449003 CET	52424	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.861462116 CET	443	52424	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.877330065 CET	443	52420	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.877403975 CET	443	52420	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.877497911 CET	443	52420	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.877522945 CET	52420	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.877573013 CET	52420	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.877943039 CET	52420	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.877949953 CET	443	52420	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.883758068 CET	52425	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.883788109 CET	443	52425	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.883863926 CET	52425	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.884345055 CET	52425	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.884361029 CET	443	52425	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.992130041 CET	443	52421	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.993742943 CET	52421	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.993757010 CET	443	52421	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:36.994584084 CET	52421	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:36.994589090 CET	443	52421	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.123863935 CET	443	52421	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.123933077 CET	443	52421	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.123992920 CET	52421	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.124305964 CET	52421	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.124320030 CET	443	52421	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.124331951 CET	52421	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.124336958 CET	443	52421	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.130364895 CET	52426	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.130405903 CET	443	52426	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.130462885 CET	52426	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.130996943 CET	52426	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.131011009 CET	443	52426	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.478737116 CET	443	52422	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.479316950 CET	52422	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.479357004 CET	443	52422	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.480271101 CET	52422	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.480278015 CET	443	52422	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.584897995 CET	443	52423	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.585494041 CET	52423	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.585510969 CET	443	52423	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.586015940 CET	52423	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.586020947 CET	443	52423	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.642775059 CET	443	52422	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.642802954 CET	443	52422	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.642855883 CET	443	52422	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.642878056 CET	52422	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.642916918 CET	52422	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.643281937 CET	52422	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.643299103 CET	443	52422	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.643310070 CET	52422	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.643321037 CET	443	52422	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.644754887 CET	443	52424	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.645327091 CET	52424	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.645344019 CET	443	52424	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.645872116 CET	52424	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.645880938 CET	443	52424	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.646900892 CET	52427	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.646936893 CET	443	52427	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.647006989 CET	52427	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.647227049 CET	52427	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.647239923 CET	443	52427	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.650317907 CET	443	52425	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.650702000 CET	52425	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.650710106 CET	443	52425	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.651109934 CET	52425	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.651114941 CET	443	52425	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.763941050 CET	443	52423	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.764049053 CET	443	52423	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.764197111 CET	52423	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.764363050 CET	52423	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.764377117 CET	443	52423	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.764390945 CET	52423	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.764394999 CET	443	52423	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.767563105 CET	52428	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.767635107 CET	443	52428	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.767858028 CET	52428	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.768068075 CET	52428	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.768105030 CET	443	52428	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.788619041 CET	443	52425	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.788669109 CET	443	52425	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.788732052 CET	52425	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.788945913 CET	52425	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.788945913 CET	52425	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.788960934 CET	443	52425	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.788969040 CET	443	52425	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.792226076 CET	52429	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.792270899 CET	443	52429	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.792366982 CET	52429	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.792526960 CET	52429	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.792556047 CET	443	52429	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.877494097 CET	443	52426	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.882518053 CET	52426	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.882540941 CET	443	52426	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.883099079 CET	52426	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.883109093 CET	443	52426	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.951692104 CET	443	52424	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.951725006 CET	443	52424	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.951771021 CET	443	52424	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.951777935 CET	52424	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.951828003 CET	52424	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.952122927 CET	52424	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.952137947 CET	443	52424	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.952147961 CET	52424	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.952152014 CET	443	52424	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.955526114 CET	52430	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.955559015 CET	443	52430	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:37.955631018 CET	52430	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.955842972 CET	52430	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:37.955857992 CET	443	52430	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.011646986 CET	443	52426	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.011677980 CET	443	52426	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.011723995 CET	443	52426	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.011745930 CET	52426	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.011786938 CET	52426	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.012067080 CET	52426	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.012073994 CET	443	52426	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.012099981 CET	52426	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.012104034 CET	443	52426	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.015458107 CET	52431	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.015490055 CET	443	52431	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.015599012 CET	52431	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.015729904 CET	52431	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.015744925 CET	443	52431	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.386337996 CET	443	52427	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.386871099 CET	52427	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.386883020 CET	443	52427	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.387447119 CET	52427	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.387450933 CET	443	52427	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.522089005 CET	443	52427	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.522186995 CET	443	52427	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.522242069 CET	52427	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.522556067 CET	52427	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.522572994 CET	443	52427	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.522584915 CET	52427	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.522595882 CET	443	52427	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.526413918 CET	443	52428	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.527609110 CET	52432	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.527631998 CET	443	52432	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.527791023 CET	52432	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.528414965 CET	52432	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.528420925 CET	52428	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.528425932 CET	443	52432	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.528455973 CET	443	52428	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.528929949 CET	52428	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.528940916 CET	443	52428	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.530510902 CET	443	52429	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.530844927 CET	52429	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.530873060 CET	443	52429	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.531300068 CET	52429	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.531310081 CET	443	52429	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.659748077 CET	443	52428	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.659857035 CET	443	52428	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.659945011 CET	52428	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.659971952 CET	443	52428	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.660006046 CET	443	52428	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.660069942 CET	52428	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.660218000 CET	52428	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.660252094 CET	443	52428	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.660276890 CET	52428	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.660291910 CET	443	52428	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.663767099 CET	52433	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.663801908 CET	443	52433	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.663912058 CET	52433	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.664057016 CET	52433	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.664069891 CET	443	52433	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.666678905 CET	443	52429	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.666749001 CET	443	52429	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.666835070 CET	52429	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.667104006 CET	52429	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.667104006 CET	52429	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.667124033 CET	443	52429	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.667133093 CET	443	52429	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.669384003 CET	52434	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.669416904 CET	443	52434	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.669493914 CET	52434	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.669672012 CET	52434	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.669687033 CET	443	52434	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.726027966 CET	443	52430	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.726674080 CET	52430	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.726699114 CET	443	52430	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.727288961 CET	52430	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.727302074 CET	443	52430	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.749238014 CET	443	52431	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.749738932 CET	52431	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.749749899 CET	443	52431	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.750226974 CET	52431	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.750233889 CET	443	52431	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.863614082 CET	443	52430	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.864006996 CET	443	52430	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.864173889 CET	52430	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.864232063 CET	52430	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.864232063 CET	52430	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.864264965 CET	443	52430	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.864270926 CET	443	52430	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.867430925 CET	52435	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.867460012 CET	443	52435	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.867538929 CET	52435	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.867742062 CET	52435	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.867750883 CET	443	52435	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.880207062 CET	443	52431	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.880280972 CET	443	52431	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.880331993 CET	52431	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.880542040 CET	52431	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.880565882 CET	443	52431	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.880611897 CET	52431	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.880619049 CET	443	52431	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.883491993 CET	52436	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.883514881 CET	443	52436	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.883634090 CET	52436	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.883783102 CET	52436	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:38.883805990 CET	443	52436	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:38.892168999 CET	443	52377	142.250.74.196	192.168.2.4
Oct 28, 2024 02:07:38.892235994 CET	443	52377	142.250.74.196	192.168.2.4
Oct 28, 2024 02:07:38.892328024 CET	52377	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:07:38.950376034 CET	52377	443	192.168.2.4	142.250.74.196
Oct 28, 2024 02:07:38.950406075 CET	443	52377	142.250.74.196	192.168.2.4
Oct 28, 2024 02:07:39.268438101 CET	443	52432	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.269105911 CET	52432	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.269123077 CET	443	52432	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.269671917 CET	52432	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.269676924 CET	443	52432	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.390733957 CET	443	52434	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.391304970 CET	52434	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.391334057 CET	443	52434	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.391809940 CET	52434	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.391815901 CET	443	52434	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.401498079 CET	443	52432	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.401527882 CET	443	52432	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.401578903 CET	443	52432	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.401612043 CET	52432	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.401648998 CET	52432	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.401902914 CET	52432	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.401920080 CET	443	52432	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.401930094 CET	52432	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.401935101 CET	443	52432	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.405069113 CET	52437	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.405154943 CET	443	52437	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.405383110 CET	52437	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.405558109 CET	52437	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.405592918 CET	443	52437	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.439620018 CET	443	52433	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.440151930 CET	52433	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.440176964 CET	443	52433	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.440659046 CET	52433	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.440664053 CET	443	52433	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.519546032 CET	443	52434	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.519577980 CET	443	52434	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.519634962 CET	52434	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.519648075 CET	443	52434	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.519674063 CET	443	52434	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.519720078 CET	52434	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.519983053 CET	52434	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.520001888 CET	443	52434	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.520018101 CET	52434	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.520024061 CET	443	52434	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.523343086 CET	52438	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.523379087 CET	443	52438	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.523567915 CET	52438	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.523695946 CET	52438	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.523708105 CET	443	52438	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.574584007 CET	443	52433	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.574752092 CET	443	52433	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.574856043 CET	52433	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.575016975 CET	52433	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.575031996 CET	443	52433	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.575042963 CET	52433	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.575047970 CET	443	52433	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.580151081 CET	52439	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.580194950 CET	443	52439	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.580265045 CET	52439	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.580482006 CET	52439	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.580499887 CET	443	52439	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.602929115 CET	443	52436	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.603579998 CET	52436	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.603601933 CET	443	52436	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.604382038 CET	52436	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.604387045 CET	443	52436	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.614417076 CET	443	52435	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.614824057 CET	52435	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.614840984 CET	443	52435	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.615235090 CET	52435	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.615241051 CET	443	52435	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.732496977 CET	443	52436	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.732579947 CET	443	52436	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.732770920 CET	52436	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.733069897 CET	52436	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.733069897 CET	52436	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.733094931 CET	443	52436	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.733104944 CET	443	52436	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.736457109 CET	52440	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.736490965 CET	443	52440	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.736758947 CET	52440	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.736804962 CET	52440	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.736815929 CET	443	52440	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.748480082 CET	443	52435	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.748544931 CET	443	52435	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.748653889 CET	52435	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.748708963 CET	52435	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.748723984 CET	443	52435	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.748733997 CET	52435	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.748739004 CET	443	52435	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.751244068 CET	52441	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.751360893 CET	443	52441	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:39.751441956 CET	52441	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.751585960 CET	52441	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:39.751616001 CET	443	52441	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.142576933 CET	443	52437	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.143138885 CET	52437	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.143168926 CET	443	52437	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.143657923 CET	52437	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.143666029 CET	443	52437	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.245523930 CET	443	52438	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.246731043 CET	52438	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.246742964 CET	443	52438	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.247122049 CET	52438	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.247128010 CET	443	52438	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.272634029 CET	443	52437	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.272783995 CET	443	52437	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.272860050 CET	52437	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.273006916 CET	52437	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.273039103 CET	443	52437	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.273053885 CET	52437	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.273061037 CET	443	52437	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.276454926 CET	52442	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.276489019 CET	443	52442	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.276571989 CET	52442	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.276791096 CET	52442	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.276807070 CET	443	52442	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.321444988 CET	443	52439	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.321980953 CET	52439	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.321999073 CET	443	52439	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.322557926 CET	52439	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.322566032 CET	443	52439	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.374603033 CET	443	52438	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.374644995 CET	443	52438	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.374712944 CET	443	52438	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.374779940 CET	52438	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.374779940 CET	52438	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.375096083 CET	52438	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.375096083 CET	52438	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.375114918 CET	443	52438	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.375125885 CET	443	52438	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.378294945 CET	52443	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.378377914 CET	443	52443	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.378514051 CET	52443	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.378705978 CET	52443	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.378766060 CET	443	52443	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.453313112 CET	443	52439	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.453473091 CET	443	52439	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.453578949 CET	52439	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.453721046 CET	52439	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.453737974 CET	443	52439	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.453751087 CET	52439	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.453758001 CET	443	52439	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.456828117 CET	52444	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.456861019 CET	443	52444	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.456927061 CET	52444	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.457076073 CET	52444	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.457093000 CET	443	52444	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.469352007 CET	443	52440	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.469774008 CET	52440	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.469794035 CET	443	52440	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.470273972 CET	52440	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.470278978 CET	443	52440	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.567022085 CET	443	52441	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.567617893 CET	52441	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.567636013 CET	443	52441	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.568121910 CET	52441	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.568130016 CET	443	52441	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.602922916 CET	443	52440	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.604026079 CET	443	52440	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.604065895 CET	443	52440	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.604084015 CET	52440	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.604135036 CET	52440	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.604231119 CET	52440	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.604245901 CET	443	52440	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.604258060 CET	52440	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.604263067 CET	443	52440	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.608119965 CET	52445	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.608138084 CET	443	52445	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.608215094 CET	52445	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.608457088 CET	52445	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.608470917 CET	443	52445	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.700439930 CET	443	52441	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.700517893 CET	443	52441	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.700710058 CET	52441	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.700949907 CET	52441	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.700978994 CET	443	52441	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.701004982 CET	52441	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.701013088 CET	443	52441	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.704504967 CET	52446	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.704546928 CET	443	52446	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:40.704613924 CET	52446	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.704832077 CET	52446	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:40.704849958 CET	443	52446	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.054639101 CET	443	52442	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.055382013 CET	52442	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.055404902 CET	443	52442	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.055982113 CET	52442	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.055988073 CET	443	52442	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.095715046 CET	443	52443	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.096225023 CET	52443	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.096246004 CET	443	52443	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.096745014 CET	52443	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.096752882 CET	443	52443	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.193248987 CET	443	52444	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.193566084 CET	443	52442	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.193698883 CET	443	52442	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.193762064 CET	52442	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.193903923 CET	52442	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.193922043 CET	443	52442	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.193933010 CET	52442	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.193938971 CET	443	52442	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.194005966 CET	52444	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.194021940 CET	443	52444	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.194484949 CET	52444	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.194490910 CET	443	52444	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.197478056 CET	52447	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.197503090 CET	443	52447	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.197582006 CET	52447	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.197757959 CET	52447	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.197773933 CET	443	52447	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.223587990 CET	443	52443	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.223659039 CET	443	52443	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.223747015 CET	52443	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.223942995 CET	52443	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.223962069 CET	443	52443	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.223973989 CET	52443	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.223980904 CET	443	52443	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.227248907 CET	52448	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.227297068 CET	443	52448	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.227646112 CET	52448	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.227811098 CET	52448	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.227826118 CET	443	52448	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.326769114 CET	443	52444	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.326988935 CET	443	52444	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.327069998 CET	52444	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.327305079 CET	52444	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.327323914 CET	443	52444	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.327356100 CET	52444	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.327362061 CET	443	52444	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.331626892 CET	52449	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.331671000 CET	443	52449	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.331862926 CET	52449	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.331912041 CET	52449	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.331919909 CET	443	52449	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.381468058 CET	443	52445	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.382039070 CET	52445	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.382051945 CET	443	52445	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.382539034 CET	52445	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.382544994 CET	443	52445	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.449155092 CET	443	52446	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.450017929 CET	52446	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.450037003 CET	443	52446	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.450637102 CET	52446	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.450642109 CET	443	52446	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.519771099 CET	443	52445	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.519865036 CET	443	52445	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.520260096 CET	52445	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.520582914 CET	52445	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.520582914 CET	52445	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.520605087 CET	443	52445	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.520617008 CET	443	52445	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.523936987 CET	52450	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.523974895 CET	443	52450	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.524144888 CET	52450	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.524296999 CET	52450	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.524318933 CET	443	52450	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.583539963 CET	443	52446	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.583611965 CET	443	52446	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.583785057 CET	52446	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.584281921 CET	52446	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.584281921 CET	52446	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.584294081 CET	443	52446	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.584300995 CET	443	52446	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.587913990 CET	52451	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.587963104 CET	443	52451	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.588057995 CET	52451	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.588470936 CET	52451	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.588486910 CET	443	52451	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.934983969 CET	443	52447	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.935759068 CET	52447	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.935785055 CET	443	52447	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:41.938968897 CET	52447	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:41.938976049 CET	443	52447	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.057797909 CET	443	52449	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.058475018 CET	52449	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.058486938 CET	443	52449	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.059053898 CET	52449	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.059060097 CET	443	52449	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.063965082 CET	443	52447	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.064119101 CET	443	52447	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.064529896 CET	52447	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.064759970 CET	52447	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.064759970 CET	52447	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.064770937 CET	443	52447	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.064781904 CET	443	52447	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.072215080 CET	52453	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.072243929 CET	443	52453	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.072679043 CET	52453	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.073564053 CET	52453	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.073579073 CET	443	52453	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.163717985 CET	443	52448	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.164417982 CET	52448	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.164431095 CET	443	52448	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.166512012 CET	52448	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.166517019 CET	443	52448	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.188388109 CET	443	52449	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.188620090 CET	443	52449	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.188704014 CET	52449	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.188958883 CET	52449	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.188967943 CET	443	52449	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.189003944 CET	52449	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.189009905 CET	443	52449	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.191860914 CET	52454	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.191906929 CET	443	52454	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.192092896 CET	52454	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.192262888 CET	52454	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.192277908 CET	443	52454	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.282300949 CET	443	52450	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.283246994 CET	52450	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.283276081 CET	443	52450	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.283761978 CET	52450	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.283767939 CET	443	52450	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.294605017 CET	443	52448	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.294644117 CET	443	52448	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.294730902 CET	443	52448	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.294738054 CET	52448	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.294975042 CET	52448	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.294996023 CET	443	52448	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.295008898 CET	52448	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.295008898 CET	52448	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.295016050 CET	443	52448	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.295022964 CET	443	52448	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.297801971 CET	52455	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.297904968 CET	443	52455	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.298021078 CET	52455	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.298141956 CET	52455	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.298171043 CET	443	52455	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.320852995 CET	443	52451	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.321283102 CET	52451	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.321321964 CET	443	52451	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.321739912 CET	52451	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.321747065 CET	443	52451	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.417777061 CET	443	52450	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.417916059 CET	443	52450	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.418021917 CET	52450	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.418277979 CET	52450	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.418293953 CET	443	52450	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.418306112 CET	52450	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.418312073 CET	443	52450	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.421452999 CET	52456	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.421492100 CET	443	52456	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.421561003 CET	52456	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.421705008 CET	52456	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.421722889 CET	443	52456	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.451915026 CET	443	52451	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.451973915 CET	443	52451	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.452052116 CET	52451	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.452370882 CET	52451	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.452390909 CET	443	52451	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.452404022 CET	52451	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.452410936 CET	443	52451	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.455466032 CET	52457	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.455497026 CET	443	52457	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.455705881 CET	52457	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.455904007 CET	52457	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.455916882 CET	443	52457	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.811558008 CET	443	52453	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.812370062 CET	52453	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.812424898 CET	443	52453	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.813211918 CET	52453	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.813226938 CET	443	52453	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.941210985 CET	443	52454	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.941776991 CET	52454	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.941791058 CET	443	52454	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.942308903 CET	52454	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.942316055 CET	443	52454	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.950700045 CET	443	52453	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.950777054 CET	443	52453	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.950881004 CET	52453	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.950920105 CET	443	52453	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.950977087 CET	52453	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.951083899 CET	52453	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.951128006 CET	443	52453	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.951159000 CET	52453	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.951175928 CET	443	52453	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.954535007 CET	52458	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.954579115 CET	443	52458	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:42.954648018 CET	52458	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.954956055 CET	52458	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:42.954973936 CET	443	52458	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.035255909 CET	443	52455	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.035964012 CET	52455	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.035998106 CET	443	52455	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.036716938 CET	52455	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.036725998 CET	443	52455	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.072103977 CET	443	52454	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.072278023 CET	443	52454	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.072340965 CET	443	52454	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.072427988 CET	52454	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.072427988 CET	52454	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.073116064 CET	52454	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.073133945 CET	443	52454	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.073146105 CET	52454	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.073153019 CET	443	52454	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.077564955 CET	52459	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.077603102 CET	443	52459	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.077687979 CET	52459	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.077908993 CET	52459	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.077923059 CET	443	52459	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.149144888 CET	443	52456	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.149879932 CET	52456	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.149898052 CET	443	52456	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.150525093 CET	52456	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.150531054 CET	443	52456	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.166378021 CET	443	52455	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.166410923 CET	443	52455	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.166455030 CET	443	52455	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.166513920 CET	52455	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.166676044 CET	52455	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.166699886 CET	443	52455	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.166713953 CET	52455	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.166722059 CET	443	52455	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.169929981 CET	52460	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.169964075 CET	443	52460	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.170030117 CET	52460	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.170232058 CET	52460	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.170257092 CET	443	52460	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.195696115 CET	443	52457	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.196495056 CET	52457	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.196510077 CET	443	52457	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.197148085 CET	52457	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.197153091 CET	443	52457	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.279654026 CET	443	52456	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.279716015 CET	443	52456	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.279846907 CET	52456	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.280042887 CET	52456	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.280066967 CET	443	52456	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.280078888 CET	52456	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.280083895 CET	443	52456	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.283528090 CET	52461	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.283575058 CET	443	52461	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.283668041 CET	52461	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.283844948 CET	52461	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.283864021 CET	443	52461	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.325814009 CET	443	52457	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.325858116 CET	443	52457	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.325917006 CET	443	52457	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.325961113 CET	52457	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.325995922 CET	52457	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.326189995 CET	52457	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.326190948 CET	52457	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.326209068 CET	443	52457	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.326217890 CET	443	52457	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.328965902 CET	52462	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.328994036 CET	443	52462	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.329066992 CET	52462	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.329205990 CET	52462	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.329222918 CET	443	52462	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.697412014 CET	443	52458	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.698571920 CET	52458	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.698571920 CET	52458	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.698613882 CET	443	52458	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.698626041 CET	443	52458	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.822165012 CET	443	52459	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.822855949 CET	52459	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.822881937 CET	443	52459	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.823762894 CET	52459	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.823771000 CET	443	52459	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.829062939 CET	443	52458	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.829163074 CET	443	52458	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.829305887 CET	52458	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.829490900 CET	52458	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.829490900 CET	52458	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.829507113 CET	443	52458	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.829516888 CET	443	52458	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.832366943 CET	52463	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.832407951 CET	443	52463	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.832578897 CET	52463	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.832737923 CET	52463	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.832751989 CET	443	52463	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.899336100 CET	443	52460	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.900564909 CET	52460	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.900564909 CET	52460	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.900578976 CET	443	52460	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.900593996 CET	443	52460	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.959022999 CET	443	52459	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.959049940 CET	443	52459	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.959125996 CET	52459	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.959160089 CET	443	52459	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.959465981 CET	52459	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.959465981 CET	52459	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.959481955 CET	443	52459	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.959541082 CET	443	52459	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.962650061 CET	52464	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.962692976 CET	443	52464	13.107.246.45	192.168.2.4
Oct 28, 2024 02:07:43.962877989 CET	52464	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.963151932 CET	52464	443	192.168.2.4	13.107.246.45
Oct 28, 2024 02:07:43.963167906 CET	443	52464	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 02:06:26.069853067 CET	53	52066	1.1.1.1	192.168.2.4
Oct 28, 2024 02:06:26.560358047 CET	62376	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:26.560595989 CET	52615	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:26.568289995 CET	53	52615	1.1.1.1	192.168.2.4
Oct 28, 2024 02:06:26.568464994 CET	53	62376	1.1.1.1	192.168.2.4
Oct 28, 2024 02:06:27.985924006 CET	54582	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:27.986054897 CET	60309	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:27.993702888 CET	53	54582	1.1.1.1	192.168.2.4
Oct 28, 2024 02:06:27.993920088 CET	53	60309	1.1.1.1	192.168.2.4
Oct 28, 2024 02:06:31.316648960 CET	63695	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:31.317015886 CET	51650	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:33.420547009 CET	64651	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:33.421019077 CET	58589	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:33.428402901 CET	53	64651	1.1.1.1	192.168.2.4
Oct 28, 2024 02:06:33.428483009 CET	53	58589	1.1.1.1	192.168.2.4
Oct 28, 2024 02:06:35.413966894 CET	55750	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:35.414390087 CET	49974	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:35.421294928 CET	53	55750	1.1.1.1	192.168.2.4
Oct 28, 2024 02:06:35.423137903 CET	53	49974	1.1.1.1	192.168.2.4
Oct 28, 2024 02:06:36.624877930 CET	138	138	192.168.2.4	192.168.2.255
Oct 28, 2024 02:06:36.848579884 CET	63795	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:36.848872900 CET	56102	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:41.224128008 CET	58419	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:41.224320889 CET	54419	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:41.231437922 CET	53	58419	1.1.1.1	192.168.2.4
Oct 28, 2024 02:06:41.231719971 CET	53	54419	1.1.1.1	192.168.2.4
Oct 28, 2024 02:06:43.000513077 CET	59424	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:43.000720978 CET	54138	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:43.059693098 CET	53	64645	1.1.1.1	192.168.2.4
Oct 28, 2024 02:06:45.657524109 CET	60060	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:45.657807112 CET	64910	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:45.748271942 CET	62567	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:45.748548031 CET	60336	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:45.885277987 CET	53	62567	1.1.1.1	192.168.2.4
Oct 28, 2024 02:06:45.885361910 CET	53	60336	1.1.1.1	192.168.2.4
Oct 28, 2024 02:06:47.450995922 CET	58677	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:47.451191902 CET	51751	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:48.210764885 CET	53	49941	1.1.1.1	192.168.2.4
Oct 28, 2024 02:06:49.272994995 CET	60042	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:06:49.273216963 CET	60001	53	192.168.2.4	1.1.1.1
Oct 28, 2024 02:07:02.468050957 CET	53	57576	1.1.1.1	192.168.2.4
Oct 28, 2024 02:07:23.911528111 CET	53	49267	1.1.1.1	192.168.2.4
Oct 28, 2024 02:07:25.518951893 CET	53	50122	1.1.1.1	192.168.2.4
Oct 28, 2024 02:07:26.236430883 CET	53	50746	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 28, 2024 02:06:47.480099916 CET	192.168.2.4	1.1.1.1	c2da	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 28, 2024 02:06:26.560358047 CET	192.168.2.4	1.1.1.1	0x7cd3	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:26.560595989 CET	192.168.2.4	1.1.1.1	0x800c	Standard query (0)	outlook.office365.com	65	IN (0x0001)	false
Oct 28, 2024 02:06:27.985924006 CET	192.168.2.4	1.1.1.1	0xcb20	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:27.986054897 CET	192.168.2.4	1.1.1.1	0x19b9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 28, 2024 02:06:31.316648960 CET	192.168.2.4	1.1.1.1	0xf4c2	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:31.317015886 CET	192.168.2.4	1.1.1.1	0x63b0	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 28, 2024 02:06:33.420547009 CET	192.168.2.4	1.1.1.1	0xbaf0	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:33.421019077 CET	192.168.2.4	1.1.1.1	0x4ed4	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 28, 2024 02:06:35.413966894 CET	192.168.2.4	1.1.1.1	0x618c	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:35.414390087 CET	192.168.2.4	1.1.1.1	0x2ea5	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 28, 2024 02:06:36.848579884 CET	192.168.2.4	1.1.1.1	0xdbb8	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:36.848872900 CET	192.168.2.4	1.1.1.1	0x8aaa	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Oct 28, 2024 02:06:41.224128008 CET	192.168.2.4	1.1.1.1	0xf1e	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:41.224320889 CET	192.168.2.4	1.1.1.1	0x5cb6	Standard query (0)	outlook.office365.com	65	IN (0x0001)	false
Oct 28, 2024 02:06:43.000513077 CET	192.168.2.4	1.1.1.1	0xb1b1	Standard query (0)	r4.res.office365.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:43.000720978 CET	192.168.2.4	1.1.1.1	0xfc38	Standard query (0)	r4.res.office365.com	65	IN (0x0001)	false
Oct 28, 2024 02:06:45.657524109 CET	192.168.2.4	1.1.1.1	0xb4ff	Standard query (0)	aadcdn.msftauthimages.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:45.657807112 CET	192.168.2.4	1.1.1.1	0x5e69	Standard query (0)	aadcdn.msftauthimages.net	65	IN (0x0001)	false
Oct 28, 2024 02:06:45.748271942 CET	192.168.2.4	1.1.1.1	0x8b51	Standard query (0)	autologon.microsoftazuread-sso.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:45.748548031 CET	192.168.2.4	1.1.1.1	0x5f79	Standard query (0)	autologon.microsoftazuread-sso.com	65	IN (0x0001)	false
Oct 28, 2024 02:06:47.450995922 CET	192.168.2.4	1.1.1.1	0xc38b	Standard query (0)	aadcdn.msftauthimages.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:47.451191902 CET	192.168.2.4	1.1.1.1	0x20df	Standard query (0)	aadcdn.msftauthimages.net	65	IN (0x0001)	false
Oct 28, 2024 02:06:49.272994995 CET	192.168.2.4	1.1.1.1	0x85c7	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:49.273216963 CET	192.168.2.4	1.1.1.1	0x7759	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 28, 2024 02:06:26.568289995 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:26.568289995 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:26.568289995 CET	1.1.1.1	192.168.2.4	0x800c	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:26.568464994 CET	1.1.1.1	192.168.2.4	0x7cd3	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:26.568464994 CET	1.1.1.1	192.168.2.4	0x7cd3	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:26.568464994 CET	1.1.1.1	192.168.2.4	0x7cd3	No error (0)	outlook.ms-acdc.office.com	FRA-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:26.568464994 CET	1.1.1.1	192.168.2.4	0x7cd3	No error (0)	FRA-efz.ms-acdc.office.com		40.99.149.98	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:26.568464994 CET	1.1.1.1	192.168.2.4	0x7cd3	No error (0)	FRA-efz.ms-acdc.office.com		52.98.253.2	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:26.568464994 CET	1.1.1.1	192.168.2.4	0x7cd3	No error (0)	FRA-efz.ms-acdc.office.com		52.98.179.178	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:27.993702888 CET	1.1.1.1	192.168.2.4	0xcb20	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:27.993920088 CET	1.1.1.1	192.168.2.4	0x19b9	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 28, 2024 02:06:31.323996067 CET	1.1.1.1	192.168.2.4	0xf4c2	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:31.324326038 CET	1.1.1.1	192.168.2.4	0x63b0	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:33.428402901 CET	1.1.1.1	192.168.2.4	0xbaf0	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:33.428402901 CET	1.1.1.1	192.168.2.4	0xbaf0	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:33.428402901 CET	1.1.1.1	192.168.2.4	0xbaf0	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:33.428483009 CET	1.1.1.1	192.168.2.4	0x4ed4	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:33.428483009 CET	1.1.1.1	192.168.2.4	0x4ed4	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:33.860192060 CET	1.1.1.1	192.168.2.4	0x9a33	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:33.860192060 CET	1.1.1.1	192.168.2.4	0x9a33	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:35.421294928 CET	1.1.1.1	192.168.2.4	0x618c	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:35.421294928 CET	1.1.1.1	192.168.2.4	0x618c	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:35.421294928 CET	1.1.1.1	192.168.2.4	0x618c	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:35.423137903 CET	1.1.1.1	192.168.2.4	0x2ea5	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:35.423137903 CET	1.1.1.1	192.168.2.4	0x2ea5	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:35.875582933 CET	1.1.1.1	192.168.2.4	0xe1af	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:35.875582933 CET	1.1.1.1	192.168.2.4	0xe1af	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:36.856408119 CET	1.1.1.1	192.168.2.4	0xdbb8	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:36.856451988 CET	1.1.1.1	192.168.2.4	0x8aaa	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:37.977744102 CET	1.1.1.1	192.168.2.4	0x488d	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:37.977744102 CET	1.1.1.1	192.168.2.4	0x488d	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:41.231437922 CET	1.1.1.1	192.168.2.4	0xf1e	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:41.231437922 CET	1.1.1.1	192.168.2.4	0xf1e	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:41.231437922 CET	1.1.1.1	192.168.2.4	0xf1e	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:41.231437922 CET	1.1.1.1	192.168.2.4	0xf1e	No error (0)	HHN-efz.ms-acdc.office.com		52.98.152.194	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:41.231437922 CET	1.1.1.1	192.168.2.4	0xf1e	No error (0)	HHN-efz.ms-acdc.office.com		40.99.222.178	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:41.231437922 CET	1.1.1.1	192.168.2.4	0xf1e	No error (0)	HHN-efz.ms-acdc.office.com		52.98.179.50	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:41.231437922 CET	1.1.1.1	192.168.2.4	0xf1e	No error (0)	HHN-efz.ms-acdc.office.com		52.98.152.178	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:41.231719971 CET	1.1.1.1	192.168.2.4	0x5cb6	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:43.009069920 CET	1.1.1.1	192.168.2.4	0xb1b1	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:43.017472029 CET	1.1.1.1	192.168.2.4	0xfc38	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:45.665604115 CET	1.1.1.1	192.168.2.4	0xb4ff	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:45.665604115 CET	1.1.1.1	192.168.2.4	0xb4ff	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:45.665604115 CET	1.1.1.1	192.168.2.4	0xb4ff	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:45.666970968 CET	1.1.1.1	192.168.2.4	0x5e69	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:45.885277987 CET	1.1.1.1	192.168.2.4	0x8b51	No error (0)	autologon.microsoftazuread-sso.com		40.126.32.134	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:45.885277987 CET	1.1.1.1	192.168.2.4	0x8b51	No error (0)	autologon.microsoftazuread-sso.com		40.126.32.133	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:45.885277987 CET	1.1.1.1	192.168.2.4	0x8b51	No error (0)	autologon.microsoftazuread-sso.com		20.190.160.17	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:45.885277987 CET	1.1.1.1	192.168.2.4	0x8b51	No error (0)	autologon.microsoftazuread-sso.com		40.126.32.72	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:45.885277987 CET	1.1.1.1	192.168.2.4	0x8b51	No error (0)	autologon.microsoftazuread-sso.com		20.190.160.20	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:45.885277987 CET	1.1.1.1	192.168.2.4	0x8b51	No error (0)	autologon.microsoftazuread-sso.com		20.190.160.22	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:45.885277987 CET	1.1.1.1	192.168.2.4	0x8b51	No error (0)	autologon.microsoftazuread-sso.com		40.126.32.138	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:45.885277987 CET	1.1.1.1	192.168.2.4	0x8b51	No error (0)	autologon.microsoftazuread-sso.com		20.190.160.14	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:47.458235025 CET	1.1.1.1	192.168.2.4	0xc38b	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:47.458235025 CET	1.1.1.1	192.168.2.4	0xc38b	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:47.458235025 CET	1.1.1.1	192.168.2.4	0xc38b	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:06:47.480011940 CET	1.1.1.1	192.168.2.4	0x20df	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:49.280154943 CET	1.1.1.1	192.168.2.4	0x85c7	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:49.280330896 CET	1.1.1.1	192.168.2.4	0x7759	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:58.285356045 CET	1.1.1.1	192.168.2.4	0xc3ca	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:06:58.285356045 CET	1.1.1.1	192.168.2.4	0xc3ca	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:07:12.582392931 CET	1.1.1.1	192.168.2.4	0xacb3	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:07:12.582392931 CET	1.1.1.1	192.168.2.4	0xacb3	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 02:07:40.675215006 CET	1.1.1.1	192.168.2.4	0x57a1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 02:07:40.675215006 CET	1.1.1.1	192.168.2.4	0x57a1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

outlook.office365.com

fs.microsoft.com

https:

aadcdn.msftauth.net

aadcdn.msftauthimages.net

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	40.99.149.98	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:27 UTC	832	OUT	GET /owa/Digital2024@mmsgau.onmicrosoft.com/groupsubscription.ashx?realm=mmsgau.onmicrosoft.com&source=WelcomeEmail&sourceversion=V3&action=conversations&subaction=gotogroup HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:31 UTC	5082	IN	HTTP/1.1 302 Content-Length: 972 Content-Type: text/html; charset=utf-8 Location: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=13eb8d95-1665-1f18-0f87-1caaaf9b92bb&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&domain_hint=mmsgau.onmicrosoft.com&nonce=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3&state=bY3BzoIwEIRB34UbsFBs6YHoQV_h97ysFZtQ1rSgvpJvafnj0cNMMl8yM2mSJNuoTVQK0RIlRSt3UjVCV1DVsgVZCEDQ2F5yDaTypt9Brk3V51qJKykFUpNIY_edlvzE8mgHO-NYQ90cnAsDLgVPzpLnwNe5IHbl4Hm5h6UP5O19tjwVGG6vvTc4uu53Jwu8eDLd2YwxmZNDO37Zw_gQN7o_kSGtax3xtEJcQ8ji0ZcPPPP_9wc Server: Microsoft-IIS/10.0 request-id: 13eb8d95-1665-1f18-0f87-1caaaf9b92bb Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedFETarget: SY5P282CU009.internal.outlook.com X-BackEndHttpStatus: 302 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: ClientId=0543886A2E51424FB3DAD8CF6E106EA9; expires=Tue, 28-Oct-2025 01:06:30 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=0543886A2E51424FB3DAD8CF6E106EA9; expires=Tue, 28-Oct-2025 01:06:30 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Mon, 28-Apr-2025 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: domainName=mmsgau.onmicrosoft.com; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Fri, 28-Oct-1994 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Fri, 28-Oct-1994 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=outlook.office365.com; expires=Fri, 28-Oct-1994 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Fri, 28-Oct-1994 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Fri, 28-Oct-1994 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Fri, 28-Oct-1994 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Fri, 28-Oct-1994 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Fri, 28-Oct-1994 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=outlook.office365.com; expires=Fri, 28-Oct-1994 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=outlook.office365.com; expires=Fri, 28-Oct-1994 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=outlook.office365.com; expires=Fri, 28-Oct-1994 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=outlook.office365.com; expires=Fri, 28-Oct-1994 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=outlook.office365.com; expires=Fri, 28-Oct-1994 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.Ru1a6v59Df9eqHa1xodKA8OUOq8uhYfvE0KAf_aV2eU=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3; expires=Mon, 28-Oct-2024 02:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Fri, 28-Oct-1994 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Fri, 28-Oct-1994 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Fri, 28-Oct-1994 01:06:31 GMT; path=/;SameSite=None; secure; HttpOnly X-CalculatedBETarget: SY4PR01MB7841.ausprd01.prod.outlook.com X-BackEndHttpStatus: 302 X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS7 X-OWA-DiagnosticsInfo: 23;2;0; X-BackEnd-Begin: 2024-10-28T01:06:30.997 X-BackEnd-End: 2024-10-28T01:06:31.012 X-DiagInfo: SY4PR01MB7841 X-BEServer: SY4PR01MB7841 X-UA-Compatible: IE=EmulateIE7 X-ResponseOrigin: OwaAppPool X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 302 X-FEProxyInfo: FR2P281CA0051.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: FRA X-FEServer: SY5P282CA0133 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=FRA&RemoteIP=155.94.241.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FirstHopCafeEFZ: FRA X-FEServer: FR2P281CA0051 Date: Mon, 28 Oct 2024 01:06:31 GMT Connection: close
2024-10-28 01:06:31 UTC	972	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 5f 69 64 3d 30 30 30 30 30 30 30 32 2d 30 30 30 30 2d 30 66 66 31 2d 63 65 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 25 32 66 6f 77 61 25 32 66 26 61 6d 70 3b 72 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-28 01:06:30 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=215298 Date: Mon, 28 Oct 2024 01:06:30 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:31 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-28 01:06:31 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=215351 Date: Mon, 28 Oct 2024 01:06:31 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-28 01:06:31 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:34 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:34 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2157820 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Mon, 28 Oct 2024 01:06:34 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-10-28 01:06:34 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-28 01:06:34 UTC	16383	IN	Data Raw: 29 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 Data Ascii: ))}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t
2024-10-28 01:06:34 UTC	2	IN	Data Raw: 50 50 Data Ascii: PP
2024-10-28 01:06:34 UTC	16383	IN	Data Raw: 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 37 Data Ascii: _E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"8004117
2024-10-28 01:06:35 UTC	16383	IN	Data Raw: 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 7d Data Ascii: UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0}
2024-10-28 01:06:35 UTC	16383	IN	Data Raw: 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 6e Data Ascii: o:function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("ign
2024-10-28 01:06:35 UTC	16383	IN	Data Raw: 53 2e 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: S.m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function
2024-10-28 01:06:35 UTC	16383	IN	Data Raw: 6e 73 65 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c Data Ascii: nset")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e\|
2024-10-28 01:06:35 UTC	16383	IN	Data Raw: 74 75 72 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c 74 Data Ascii: turn i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},t
2024-10-28 01:06:35 UTC	11301	IN	Data Raw: 67 3d 65 2e 6e 6f 74 69 66 79 4f 6e 43 6c 69 65 6e 74 41 62 6f 72 74 7c 7c 21 31 2c 6d 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 53 61 73 45 6e 64 41 75 74 68 50 6f 73 74 54 6f 47 65 74 53 77 69 74 63 68 2c 76 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 46 69 78 55 49 43 72 61 73 68 46 6f 72 41 70 69 52 65 71 75 65 73 74 48 61 6e 64 6c 65 72 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3d 7b 68 70 67 69 64 3a 64 2e 68 70 67 69 64 7c 7c 30 2c 68 70 67 61 63 74 3a 64 2e 68 70 67 61 63 74 7c 7c 30 7d 3b 72 65 74 75 72 6e 20 65 7c 7c 28 74 2e 41 63 63 65 70 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 6e 26 26 64 2e 61 70 69 43 61 6e 61 72 79 26 26 28 74 2e 63 61 6e 61 72 79 3d 64 2e 61 70 69 43 61 6e 61 72 79 29 29 2c 64 Data Ascii: g=e.notifyOnClientAbort\|\|!1,m=l.ServerData.fSasEndAuthPostToGetSwitch,v=l.ServerData.fFixUICrashForApiRequestHandler;function b(e){var t={hpgid:d.hpgid\|\|0,hpgact:d.hpgact\|\|0};return e\|\|(t.Accept="application/json",n&&d.apiCanary&&(t.canary=d.apiCanary)),d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49751	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:36 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:36 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2157822 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Mon, 28 Oct 2024 01:06:36 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-10-28 01:06:36 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-28 01:06:36 UTC	1	IN	Data Raw: 29 Data Ascii: )
2024-10-28 01:06:36 UTC	16383	IN	Data Raw: 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 Data Ascii: )}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t)
2024-10-28 01:06:36 UTC	16383	IN	Data Raw: 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 Data Ascii: P_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"800411
2024-10-28 01:06:37 UTC	16383	IN	Data Raw: 22 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 Data Ascii: "UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0
2024-10-28 01:06:37 UTC	16383	IN	Data Raw: 2c 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 Data Ascii: ,o:function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("ig
2024-10-28 01:06:37 UTC	16383	IN	Data Raw: 2b 53 2e 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e Data Ascii: +S.m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function
2024-10-28 01:06:37 UTC	16383	IN	Data Raw: 55 6e 73 65 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 Data Ascii: Unset")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e
2024-10-28 01:06:37 UTC	16383	IN	Data Raw: 65 74 75 72 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c Data Ascii: eturn i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},
2024-10-28 01:06:37 UTC	11302	IN	Data Raw: 2c 67 3d 65 2e 6e 6f 74 69 66 79 4f 6e 43 6c 69 65 6e 74 41 62 6f 72 74 7c 7c 21 31 2c 6d 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 53 61 73 45 6e 64 41 75 74 68 50 6f 73 74 54 6f 47 65 74 53 77 69 74 63 68 2c 76 3d 6c 2e 53 65 72 76 65 72 44 61 74 61 2e 66 46 69 78 55 49 43 72 61 73 68 46 6f 72 41 70 69 52 65 71 75 65 73 74 48 61 6e 64 6c 65 72 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 74 3d 7b 68 70 67 69 64 3a 64 2e 68 70 67 69 64 7c 7c 30 2c 68 70 67 61 63 74 3a 64 2e 68 70 67 61 63 74 7c 7c 30 7d 3b 72 65 74 75 72 6e 20 65 7c 7c 28 74 2e 41 63 63 65 70 74 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 6e 26 26 64 2e 61 70 69 43 61 6e 61 72 79 26 26 28 74 2e 63 61 6e 61 72 79 3d 64 2e 61 70 69 43 61 6e 61 72 79 29 29 2c Data Ascii: ,g=e.notifyOnClientAbort\|\|!1,m=l.ServerData.fSasEndAuthPostToGetSwitch,v=l.ServerData.fFixUICrashForApiRequestHandler;function b(e){var t={hpgid:d.hpgid\|\|0,hpgact:d.hpgact\|\|0};return e\|\|(t.Accept="application/json",n&&d.apiCanary&&(t.canary=d.apiCanary)),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49757	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:39 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:39 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2716667 Cache-Control: public, max-age=31536000 Content-MD5: 8N6amNvfqMAnQs5tkvslJA== Content-Type: text/css Date: Mon, 28 Oct 2024 01:06:39 GMT Etag: 0x8DCDDAB171F8006 Last-Modified: Wed, 25 Sep 2024 21:43:27 GMT Server: ECAcc (lhc/78AC) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 541c8d22-201e-00d2-0520-100289000000 x-ms-version: 2009-09-19 Content-Length: 113378 Connection: close
2024-10-28 01:06:39 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-10-28 01:06:39 UTC	16383	IN	Data Raw: 73 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a Data Ascii: s-1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:
2024-10-28 01:06:39 UTC	16383	IN	Data Raw: 72 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 Data Ascii: rgin-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-b
2024-10-28 01:06:39 UTC	16383	IN	Data Raw: 66 6c 6f 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 Data Ascii: flow-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.ta
2024-10-28 01:06:39 UTC	16383	IN	Data Raw: 55 49 22 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e Data Ascii: UI","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mon
2024-10-28 01:06:39 UTC	16383	IN	Data Raw: 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 7d 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 66 6f 63 75 73 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 3b 74 65 78 74 2d 64 65 Data Ascii: mary:hover{background-color:#005da6}.btn.btn-primary-focus,.btn.btn-primary:focus,button.btn-primary:focus,input[type="button"].btn-primary:focus,input[type="submit"].btn-primary:focus,input[type="reset"].btn-primary:focus{background-color:#005da6;text-de
2024-10-28 01:06:39 UTC	15080	IN	Data Raw: 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a Data Ascii: rgin-bottom:20px;margin-top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;padding:0;margin-top:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49759	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:39 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_QLF_8apNRJD3OCol8jwtxw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:39 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2161279 Cache-Control: public, max-age=31536000 Content-MD5: 0mJaO3qA+eD2v9j9vu2xZA== Content-Type: application/x-javascript Date: Mon, 28 Oct 2024 01:06:39 GMT Etag: 0x8DCE31CBFE0A3E9 Last-Modified: Wed, 02 Oct 2024 19:59:39 GMT Server: ECAcc (lhc/789E) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c5df7839-701e-00c1-4e2d-15f32c000000 x-ms-version: 2009-09-19 Content-Length: 449728 Connection: close
2024-10-28 01:06:39 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-28 01:06:39 UTC	16383	IN	Data Raw: 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a Data Ascii: DING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthoriz
2024-10-28 01:06:39 UTC	2	IN	Data Raw: 64 6f Data Ascii: do
2024-10-28 01:06:39 UTC	16383	IN	Data Raw: 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 75 73 68 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 65 2c 6e 29 7d 2c 72 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 65 2c 6e 29 7d 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 Data Ascii: cument.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{pushState:function(e,n){T.isHistorySupported()&&u.history.pushState(e,n)},replaceState:function(e,n){T.isHistorySupported()&&u.history.replaceState(e,n)}},addEventListe
2024-10-28 01:06:39 UTC	16383	IN	Data Raw: 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 22 29 7c 7c 28 6e 2e 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 3d 21 30 29 2c 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 3d 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 7c 7c 69 2e 45 76 65 6e 74 4c 65 76 65 6c 2e 49 6e 66 6f 2c 7b 76 69 65 77 4d 6f 64 65 6c 3a 65 2c 74 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3a 6e 7d 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e Data Ascii: ropertyLogOption=function(e,n){return(n=n\|\|{}).hasOwnProperty("tracingPropertyChange")\|\|(n.tracingPropertyChange=!0),n.eventLevel=n.eventLevel\|\|i.EventLevel.Info,{viewModel:e,tracingOptions:n}},s.getDefaultTextBoxPropertyLogOption=function(e,n){return(n=n
2024-10-28 01:06:39 UTC	16383	IN	Data Raw: 72 20 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 7c 7c 22 22 2c 69 3d 65 2e 70 75 72 70 6f 73 65 7c 7c 63 2e 50 61 73 73 77 6f 72 64 2c 61 3d 65 2e 70 72 6f 6f 66 54 79 70 65 2c 6f 3d 65 2e 70 72 6f 6f 66 44 61 74 61 7c 7c 22 22 2c 72 3d 65 2e 69 73 45 6e 63 72 79 70 74 65 64 2c 73 3d 65 2e 75 69 4d 6f 64 65 2c 64 3d 65 2e 6c 63 69 64 2c 6c 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 7c 7c 22 22 2c 70 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 43 6f 64 65 7c 7c 22 22 2c 6d 3d 65 2e 75 6e 61 75 74 68 53 65 73 73 69 6f 6e 49 64 2c 62 3d 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 2c 76 3d 65 2e 63 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 3b 74 68 69 73 5b 75 2e 55 73 65 72 6e 61 6d 65 5d 3d 6e Data Ascii: r n=e.username\|\|"",t=e.flowToken\|\|"",i=e.purpose\|\|c.Password,a=e.proofType,o=e.proofData\|\|"",r=e.isEncrypted,s=e.uiMode,d=e.lcid,l=e.phoneCountry\|\|"",p=e.phoneCountryCode\|\|"",m=e.unauthSessionId,b=e.proofConfirmation,v=e.canaryFlowToken;this[u.Username]=n
2024-10-28 01:06:39 UTC	16383	IN	Data Raw: 70 2e 72 65 6d 6f 76 65 28 74 2c 22 6c 6f 67 69 6e 5f 68 69 6e 74 22 29 3b 76 61 72 20 69 3d 70 65 3f 67 2e 63 6c 6f 6e 65 28 70 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6e 26 26 28 6e 2e 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 3d 3d 3d 53 2e 4e 6f 74 45 78 69 73 74 7c 7c 6e 2e 49 73 55 6e 6d 61 6e 61 67 65 64 26 26 6e 2e 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 3d 3d 3d 53 2e 45 78 69 73 74 73 29 26 26 6f 6e 28 65 2c 6e 29 26 26 28 69 3f 69 2e 75 6e 73 61 66 65 5f 75 73 65 72 6e 61 6d 65 3d 65 3a 28 74 3d 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 74 2c 22 75 73 65 72 6e 61 6d 65 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 29 2c 74 3d 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 74 2c 22 6c 6f 67 69 6e Data Ascii: p.remove(t,"login_hint");var i=pe?g.clone(pe):null;return n&&(n.IfExistsResult===S.NotExist\|\|n.IsUnmanaged&&n.IfExistsResult===S.Exists)&&on(e,n)&&(i?i.unsafe_username=e:(t=p.appendOrReplace(t,"username",encodeURIComponent(e)),t=p.appendOrReplace(t,"login
2024-10-28 01:06:40 UTC	16383	IN	Data Raw: 43 65 72 74 69 66 69 63 61 74 65 49 6e 74 65 72 73 74 69 74 69 61 6c 56 69 65 77 2c 49 3d 74 2e 66 49 73 50 61 73 73 6b 65 79 53 75 70 70 6f 72 74 45 6e 61 62 6c 65 64 2c 41 3d 74 2e 66 49 73 56 65 72 69 66 69 61 62 6c 65 43 72 65 64 65 6e 74 69 61 6c 73 53 75 70 70 6f 72 74 45 6e 61 62 6c 65 64 2c 52 3d 74 2e 66 55 73 65 57 65 62 76 69 65 77 46 69 64 6f 43 75 73 74 6f 6d 50 72 6f 74 6f 63 6f 6c 2c 4c 3d 5b 5d 2c 42 3d 6e 75 6c 6c 2c 4f 3d 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 29 3b 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 4e 28 65 29 2c 6e 2e 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 28 21 31 29 2c 6e 2e 6f 6e 53 77 69 74 63 68 56 69 65 77 28 67 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 21 31 2c 42 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 Data Ascii: CertificateInterstitialView,I=t.fIsPasskeySupportEnabled,A=t.fIsVerifiableCredentialsSupportEnabled,R=t.fUseWebviewFidoCustomProtocol,L=[],B=null,O=i.observable();function F(e){N(e),n.onSetPendingRequest(!1),n.onSwitchView(g.OneTimeCode,!1,B)}function U(e
2024-10-28 01:06:40 UTC	16383	IN	Data Raw: 5b 5d 3b 72 65 74 75 72 6e 20 6f 2e 66 6f 72 45 61 63 68 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 6e 5b 74 5d 2e 6e 61 6d 65 3d 3d 3d 65 2e 6e 61 6d 65 26 26 6e 5b 74 5d 2e 69 64 70 3d 3d 3d 65 2e 69 64 70 29 72 65 74 75 72 6e 20 74 3b 72 65 74 75 72 6e 2d 31 7d 28 6e 2c 65 29 3b 2d 31 3d 3d 3d 61 3f 28 6e 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 3f 65 2e 75 6e 73 68 69 66 74 28 6e 29 3a 65 2e 70 75 73 68 28 6e 29 2c 69 2e 70 75 73 68 28 6e 29 29 3a 6e 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 3f 28 65 2e 73 70 6c 69 63 65 28 61 2c 31 29 2c 65 2e 75 6e 73 68 69 66 74 28 6e 29 2c 69 2e 70 75 73 68 28 6e 29 Data Ascii: [];return o.forEach(n,(function(n){var a=function(e,n){for(var t=0;t<n.length;t++)if(n[t].name===e.name&&n[t].idp===e.idp)return t;return-1}(n,e);-1===a?(n.isWindowsSso?e.unshift(n):e.push(n),i.push(n)):n.isWindowsSso?(e.splice(a,1),e.unshift(n),i.push(n)
2024-10-28 01:06:40 UTC	16383	IN	Data Raw: 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 65 7d 7d 28 65 2e 75 72 6c 49 50 76 36 45 78 70 65 72 69 6d 65 6e 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 66 55 70 67 72 61 64 65 45 56 43 65 72 74 26 26 6e 75 6c 6c 21 3d 3d 6e 65 77 20 52 65 67 45 78 70 28 22 57 69 6e 64 6f 77 73 20 4e 54 20 28 5b 30 2d 39 5d 7b 31 2c 7d 5b 2e 30 2d 39 5d 7b 30 2c 7d 29 22 29 2e 65 78 65 63 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 26 26 70 61 72 73 65 46 6c 6f 61 74 28 52 65 67 45 78 70 2e 24 31 29 3c 36 26 26 70 2e 67 65 74 49 45 56 65 72 73 69 6f 6e 28 29 3e 3d 37 29 74 72 79 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 65 76 22 29 2e Data Ascii: ){!function(e){if(e){(new Image).src=e}}(e.urlIPv6Experiment),function(e){if(e.fUpgradeEVCert&&null!==new RegExp("Windows NT ([0-9]{1,}[.0-9]{0,})").exec(navigator.userAgent)&&parseFloat(RegExp.$1)<6&&p.getIEVersion()>=7)try{document.getElementById("ev").

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49760	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:39 UTC	656	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:39 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5240073 Cache-Control: public, max-age=31536000 Content-MD5: wheuNbhZLcnx5oBIfa0JTw== Content-Type: application/x-javascript Date: Mon, 28 Oct 2024 01:06:39 GMT Etag: 0x8DCC6D4DD76DEA7 Last-Modified: Tue, 27 Aug 2024 20:14:33 GMT Server: ECAcc (lhc/794B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5fcf6533-b01e-000b-222d-f97a0c000000 x-ms-version: 2009-09-19 Content-Length: 57443 Connection: close
2024-10-28 01:06:39 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-10-28 01:06:39 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-10-28 01:06:39 UTC	16383	IN	Data Raw: 22 2c 65 2e 53 54 52 5f 4e 61 74 69 76 65 5f 53 53 50 52 5f 45 6e 74 65 72 43 6f 64 65 5f 44 65 73 63 3d 22 45 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 77 65 20 6a 75 73 74 20 73 65 6e 74 20 74 6f 20 7b 30 7d 20 74 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 22 2c 65 2e 53 54 52 5f 43 65 72 74 42 61 73 65 41 75 74 68 50 6f 6c 69 63 79 5f 42 6c 6f 63 6b 3d 22 59 6f 75 20 63 61 6e 27 74 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 54 72 79 20 73 69 67 6e 69 6e 67 20 69 6e 20 77 69 74 68 20 61 6e 6f 74 68 65 72 20 6d 65 74 68 6f 64 2e 22 2c 65 2e 53 54 52 5f 49 6e 76 61 6c 69 64 43 72 65 64 65 6e 74 69 61 6c 44 75 65 54 6f 4d 66 61 43 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 3d 22 4d 75 6c 74 69 Data Ascii: ",e.STR_Native_SSPR_EnterCode_Desc="Enter the code we just sent to {0} to reset your password.",e.STR_CertBaseAuthPolicy_Block="You can't sign in with a certificate. Try signing in with another method.",e.STR_InvalidCredentialDueToMfaClassification="Multi
2024-10-28 01:06:39 UTC	8294	IN	Data Raw: 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 4e 75 Data Ascii: ",UserVoiceAuthFailedCallWentToVoicemail:"UserVoiceAuthFailedCallWentToVoicemail",UserVoiceAuthFailedInvalidPhoneInput:"UserVoiceAuthFailedInvalidPhoneInput",UserVoiceAuthFailedPhoneHungUp:"UserVoiceAuthFailedPhoneHungUp",UserVoiceAuthFailedInvalidPhoneNu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49762	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:40 UTC	431	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:40 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5240074 Cache-Control: public, max-age=31536000 Content-MD5: wheuNbhZLcnx5oBIfa0JTw== Content-Type: application/x-javascript Date: Mon, 28 Oct 2024 01:06:40 GMT Etag: 0x8DCC6D4DD76DEA7 Last-Modified: Tue, 27 Aug 2024 20:14:33 GMT Server: ECAcc (lhc/794B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5fcf6533-b01e-000b-222d-f97a0c000000 x-ms-version: 2009-09-19 Content-Length: 57443 Connection: close
2024-10-28 01:06:41 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-10-28 01:06:41 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-10-28 01:06:41 UTC	16383	IN	Data Raw: 22 2c 65 2e 53 54 52 5f 4e 61 74 69 76 65 5f 53 53 50 52 5f 45 6e 74 65 72 43 6f 64 65 5f 44 65 73 63 3d 22 45 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 77 65 20 6a 75 73 74 20 73 65 6e 74 20 74 6f 20 7b 30 7d 20 74 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 22 2c 65 2e 53 54 52 5f 43 65 72 74 42 61 73 65 41 75 74 68 50 6f 6c 69 63 79 5f 42 6c 6f 63 6b 3d 22 59 6f 75 20 63 61 6e 27 74 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 54 72 79 20 73 69 67 6e 69 6e 67 20 69 6e 20 77 69 74 68 20 61 6e 6f 74 68 65 72 20 6d 65 74 68 6f 64 2e 22 2c 65 2e 53 54 52 5f 49 6e 76 61 6c 69 64 43 72 65 64 65 6e 74 69 61 6c 44 75 65 54 6f 4d 66 61 43 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 3d 22 4d 75 6c 74 69 Data Ascii: ",e.STR_Native_SSPR_EnterCode_Desc="Enter the code we just sent to {0} to reset your password.",e.STR_CertBaseAuthPolicy_Block="You can't sign in with a certificate. Try signing in with another method.",e.STR_InvalidCredentialDueToMfaClassification="Multi
2024-10-28 01:06:41 UTC	8294	IN	Data Raw: 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 4e 75 Data Ascii: ",UserVoiceAuthFailedCallWentToVoicemail:"UserVoiceAuthFailedCallWentToVoicemail",UserVoiceAuthFailedInvalidPhoneInput:"UserVoiceAuthFailedInvalidPhoneInput",UserVoiceAuthFailedPhoneHungUp:"UserVoiceAuthFailedPhoneHungUp",UserVoiceAuthFailedInvalidPhoneNu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49763	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:42 UTC	412	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_QLF_8apNRJD3OCol8jwtxw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:42 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2161282 Cache-Control: public, max-age=31536000 Content-MD5: 0mJaO3qA+eD2v9j9vu2xZA== Content-Type: application/x-javascript Date: Mon, 28 Oct 2024 01:06:42 GMT Etag: 0x8DCE31CBFE0A3E9 Last-Modified: Wed, 02 Oct 2024 19:59:39 GMT Server: ECAcc (lhc/789E) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c5df7839-701e-00c1-4e2d-15f32c000000 x-ms-version: 2009-09-19 Content-Length: 449728 Connection: close
2024-10-28 01:06:42 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-28 01:06:42 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-10-28 01:06:42 UTC	16383	IN	Data Raw: 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 Data Ascii: ING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthorize
2024-10-28 01:06:42 UTC	16383	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 75 73 68 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 65 2c 6e 29 7d 2c 72 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 65 2c 6e 29 7d 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: ocument.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{pushState:function(e,n){T.isHistorySupported()&&u.history.pushState(e,n)},replaceState:function(e,n){T.isHistorySupported()&&u.history.replaceState(e,n)}},addEventList
2024-10-28 01:06:42 UTC	16383	IN	Data Raw: 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 22 29 7c 7c 28 6e 2e 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 3d 21 30 29 2c 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 3d 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 7c 7c 69 2e 45 76 65 6e 74 4c 65 76 65 6c 2e 49 6e 66 6f 2c 7b 76 69 65 77 4d 6f 64 65 6c 3a 65 2c 74 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3a 6e 7d 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d Data Ascii: PropertyLogOption=function(e,n){return(n=n\|\|{}).hasOwnProperty("tracingPropertyChange")\|\|(n.tracingPropertyChange=!0),n.eventLevel=n.eventLevel\|\|i.EventLevel.Info,{viewModel:e,tracingOptions:n}},s.getDefaultTextBoxPropertyLogOption=function(e,n){return(n=
2024-10-28 01:06:42 UTC	16383	IN	Data Raw: 61 72 20 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 7c 7c 22 22 2c 69 3d 65 2e 70 75 72 70 6f 73 65 7c 7c 63 2e 50 61 73 73 77 6f 72 64 2c 61 3d 65 2e 70 72 6f 6f 66 54 79 70 65 2c 6f 3d 65 2e 70 72 6f 6f 66 44 61 74 61 7c 7c 22 22 2c 72 3d 65 2e 69 73 45 6e 63 72 79 70 74 65 64 2c 73 3d 65 2e 75 69 4d 6f 64 65 2c 64 3d 65 2e 6c 63 69 64 2c 6c 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 7c 7c 22 22 2c 70 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 43 6f 64 65 7c 7c 22 22 2c 6d 3d 65 2e 75 6e 61 75 74 68 53 65 73 73 69 6f 6e 49 64 2c 62 3d 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 2c 76 3d 65 2e 63 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 3b 74 68 69 73 5b 75 2e 55 73 65 72 6e 61 6d 65 5d 3d Data Ascii: ar n=e.username\|\|"",t=e.flowToken\|\|"",i=e.purpose\|\|c.Password,a=e.proofType,o=e.proofData\|\|"",r=e.isEncrypted,s=e.uiMode,d=e.lcid,l=e.phoneCountry\|\|"",p=e.phoneCountryCode\|\|"",m=e.unauthSessionId,b=e.proofConfirmation,v=e.canaryFlowToken;this[u.Username]=
2024-10-28 01:06:42 UTC	16383	IN	Data Raw: 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 6c 6f 67 69 6e 5f 68 69 6e 74 22 29 3b 76 61 72 20 69 3d 70 65 3f 67 2e 63 6c 6f 6e 65 28 70 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6e 26 26 28 6e 2e 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 3d 3d 3d 53 2e 4e 6f 74 45 78 69 73 74 7c 7c 6e 2e 49 73 55 6e 6d 61 6e 61 67 65 64 26 26 6e 2e 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 3d 3d 3d 53 2e 45 78 69 73 74 73 29 26 26 6f 6e 28 65 2c 6e 29 26 26 28 69 3f 69 2e 75 6e 73 61 66 65 5f 75 73 65 72 6e 61 6d 65 3d 65 3a 28 74 3d 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 74 2c 22 75 73 65 72 6e 61 6d 65 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 29 2c 74 3d 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 74 2c 22 6c 6f 67 69 Data Ascii: =p.remove(t,"login_hint");var i=pe?g.clone(pe):null;return n&&(n.IfExistsResult===S.NotExist\|\|n.IsUnmanaged&&n.IfExistsResult===S.Exists)&&on(e,n)&&(i?i.unsafe_username=e:(t=p.appendOrReplace(t,"username",encodeURIComponent(e)),t=p.appendOrReplace(t,"logi
2024-10-28 01:06:42 UTC	16383	IN	Data Raw: 65 43 65 72 74 69 66 69 63 61 74 65 49 6e 74 65 72 73 74 69 74 69 61 6c 56 69 65 77 2c 49 3d 74 2e 66 49 73 50 61 73 73 6b 65 79 53 75 70 70 6f 72 74 45 6e 61 62 6c 65 64 2c 41 3d 74 2e 66 49 73 56 65 72 69 66 69 61 62 6c 65 43 72 65 64 65 6e 74 69 61 6c 73 53 75 70 70 6f 72 74 45 6e 61 62 6c 65 64 2c 52 3d 74 2e 66 55 73 65 57 65 62 76 69 65 77 46 69 64 6f 43 75 73 74 6f 6d 50 72 6f 74 6f 63 6f 6c 2c 4c 3d 5b 5d 2c 42 3d 6e 75 6c 6c 2c 4f 3d 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 29 3b 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 4e 28 65 29 2c 6e 2e 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 28 21 31 29 2c 6e 2e 6f 6e 53 77 69 74 63 68 56 69 65 77 28 67 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 21 31 2c 42 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 Data Ascii: eCertificateInterstitialView,I=t.fIsPasskeySupportEnabled,A=t.fIsVerifiableCredentialsSupportEnabled,R=t.fUseWebviewFidoCustomProtocol,L=[],B=null,O=i.observable();function F(e){N(e),n.onSetPendingRequest(!1),n.onSwitchView(g.OneTimeCode,!1,B)}function U(
2024-10-28 01:06:43 UTC	16383	IN	Data Raw: 3d 5b 5d 3b 72 65 74 75 72 6e 20 6f 2e 66 6f 72 45 61 63 68 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 6e 5b 74 5d 2e 6e 61 6d 65 3d 3d 3d 65 2e 6e 61 6d 65 26 26 6e 5b 74 5d 2e 69 64 70 3d 3d 3d 65 2e 69 64 70 29 72 65 74 75 72 6e 20 74 3b 72 65 74 75 72 6e 2d 31 7d 28 6e 2c 65 29 3b 2d 31 3d 3d 3d 61 3f 28 6e 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 3f 65 2e 75 6e 73 68 69 66 74 28 6e 29 3a 65 2e 70 75 73 68 28 6e 29 2c 69 2e 70 75 73 68 28 6e 29 29 3a 6e 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 3f 28 65 2e 73 70 6c 69 63 65 28 61 2c 31 29 2c 65 2e 75 6e 73 68 69 66 74 28 6e 29 2c 69 2e 70 75 73 68 28 6e Data Ascii: =[];return o.forEach(n,(function(n){var a=function(e,n){for(var t=0;t<n.length;t++)if(n[t].name===e.name&&n[t].idp===e.idp)return t;return-1}(n,e);-1===a?(n.isWindowsSso?e.unshift(n):e.push(n),i.push(n)):n.isWindowsSso?(e.splice(a,1),e.unshift(n),i.push(n
2024-10-28 01:06:43 UTC	16383	IN	Data Raw: 65 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 65 7d 7d 28 65 2e 75 72 6c 49 50 76 36 45 78 70 65 72 69 6d 65 6e 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 66 55 70 67 72 61 64 65 45 56 43 65 72 74 26 26 6e 75 6c 6c 21 3d 3d 6e 65 77 20 52 65 67 45 78 70 28 22 57 69 6e 64 6f 77 73 20 4e 54 20 28 5b 30 2d 39 5d 7b 31 2c 7d 5b 2e 30 2d 39 5d 7b 30 2c 7d 29 22 29 2e 65 78 65 63 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 26 26 70 61 72 73 65 46 6c 6f 61 74 28 52 65 67 45 78 70 2e 24 31 29 3c 36 26 26 70 2e 67 65 74 49 45 56 65 72 73 69 6f 6e 28 29 3e 3d 37 29 74 72 79 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 65 76 22 29 Data Ascii: e){!function(e){if(e){(new Image).src=e}}(e.urlIPv6Experiment),function(e){if(e.fUpgradeEVCert&&null!==new RegExp("Windows NT ([0-9]{1,}[.0-9]{0,})").exec(navigator.userAgent)&&parseFloat(RegExp.$1)<6&&p.getIEVersion()>=7)try{document.getElementById("ev")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49764	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:42 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:42 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6269700 Cache-Control: public, max-age=31536000 Content-MD5: LT++1t3XGfzBv7UAthL87A== Content-Type: application/x-javascript Date: Mon, 28 Oct 2024 01:06:42 GMT Etag: 0x8DCBD52F37806EC Last-Modified: Thu, 15 Aug 2024 17:51:54 GMT Server: ECAcc (lhc/7888) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 10a7d1b4-001e-005d-7bcf-ef5e4a000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-10-28 01:06:42 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-28 01:06:42 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-10-28 01:06:42 UTC	16383	IN	Data Raw: 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e Data Ascii: =Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(537);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var n
2024-10-28 01:06:42 UTC	16383	IN	Data Raw: 31 7d 29 2c 65 7d 28 72 28 36 38 32 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c 65 Data Ascii: 1}),e}(r(682));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rule
2024-10-28 01:06:42 UTC	16383	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 Data Ascii: "!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binary
2024-10-28 01:06:42 UTC	16383	IN	Data Raw: 67 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d Data Ascii: g;function N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-
2024-10-28 01:06:42 UTC	16383	IN	Data Raw: 76 61 72 20 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 Data Ascii: var r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(
2024-10-28 01:06:43 UTC	16383	IN	Data Raw: 29 7d 72 65 74 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b 22 Data Ascii: )}return new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s["
2024-10-28 01:06:43 UTC	16383	IN	Data Raw: 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 61 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 6f 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 29 66 6f 72 28 3b 65 2d 2d 3b 29 74 3d 69 28 74 2c 75 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 6f Data Ascii: exports=function(t,e){if(a&&"string"==typeof t&&!o.prepareStackTrace)for(;e--;)t=i(t,u,"");return t}},function(t,e,r){"use strict";var n=r(537);t.exports=!n((function(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.pro
2024-10-28 01:06:43 UTC	16383	IN	Data Raw: 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 65 2e 70 6c 75 67 69 6e 7c 7c 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 26 26 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 26 26 28 65 2e 70 6c 75 67 69 6e 3d 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 29 3b 76 61 72 20 72 3d 6e 65 77 20 73 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 70 75 73 68 28 72 29 2c 72 7d 7d 2c 7b 6b 65 79 3a 22 77 61 72 6e 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 66 69 6c 74 65 72 28 28 66 75 Data Ascii: &arguments[1]!==undefined?arguments[1]:{};e.plugin\|\|this.lastPlugin&&this.lastPlugin.postcssPlugin&&(e.plugin=this.lastPlugin.postcssPlugin);var r=new s(t,e);return this.messages.push(r),r}},{key:"warnings",value:function(){return this.messages.filter((fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49765	52.98.152.194	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:42 UTC	928	OUT	GET /owa/prefetch.aspx HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ClientId=0543886A2E51424FB3DAD8CF6E106EA9; OIDC=1; domainName=mmsgau.onmicrosoft.com; OpenIdConnect.nonce.v3.Ru1a6v59Df9eqHa1xodKA8OUOq8uhYfvE0KAf_aV2eU=638656743910126806.30a09a8d-90c7-4b50-9e1b-973fc77069c3
2024-10-28 01:06:42 UTC	1588	IN	HTTP/1.1 200 OK Cache-Control: private, no-store Content-Length: 2745 Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 request-id: 37b1ef12-a525-95c2-105a-4d8f88f0be2f Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedFETarget: BE1P281CU021.internal.outlook.com X-BackEndHttpStatus: 200 Set-Cookie: OWAPF=v:15.20.8093.27&l:mouse; path=/; secure; HttpOnly X-CalculatedBETarget: BEZP281MB2230.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS6 X-OWA-Version: 15.20.8093.27 X-OWA-DiagnosticsInfo: 5;0;0; X-BackEnd-Begin: 2024-10-28T01:06:42.517 X-BackEnd-End: 2024-10-28T01:06:42.517 X-DiagInfo: BEZP281MB2230 X-BEServer: BEZP281MB2230 X-UA-Compatible: IE=EmulateIE7 X-ResponseOrigin: OwaAppPool X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 200 X-FEProxyInfo: FR0P281CA0003.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-FEServer: BE1P281CA0270 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=HHN&RemoteIP=155.94.241.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FirstHopCafeEFZ: HHN X-FEServer: FR0P281CA0003 Date: Mon, 28 Oct 2024 01:06:42 GMT Connection: close
2024-10-28 01:06:42 UTC	2745	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 65 66 65 74 63 68 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f Data Ascii: <!DOCTYPE html><html><head> <title>Prefetch</title> <meta http-equiv="x-ua-compatible" content="IE=Edge"> <style> @font-face { font-family: 'office365icons'; src: url('https:/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49767	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:45 UTC	435	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:45 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6269703 Cache-Control: public, max-age=31536000 Content-MD5: LT++1t3XGfzBv7UAthL87A== Content-Type: application/x-javascript Date: Mon, 28 Oct 2024 01:06:45 GMT Etag: 0x8DCBD52F37806EC Last-Modified: Thu, 15 Aug 2024 17:51:54 GMT Server: ECAcc (lhc/7888) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 10a7d1b4-001e-005d-7bcf-ef5e4a000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-10-28 01:06:45 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-28 01:06:45 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-10-28 01:06:45 UTC	16383	IN	Data Raw: 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e Data Ascii: =Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(537);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var n
2024-10-28 01:06:45 UTC	16383	IN	Data Raw: 31 7d 29 2c 65 7d 28 72 28 36 38 32 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c 65 Data Ascii: 1}),e}(r(682));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rule
2024-10-28 01:06:45 UTC	16383	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 Data Ascii: "!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binary
2024-10-28 01:06:45 UTC	16383	IN	Data Raw: 67 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d Data Ascii: g;function N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-
2024-10-28 01:06:45 UTC	16383	IN	Data Raw: 76 61 72 20 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 Data Ascii: var r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(
2024-10-28 01:06:45 UTC	5	IN	Data Raw: 29 7d 72 65 74 Data Ascii: )}ret
2024-10-28 01:06:45 UTC	16383	IN	Data Raw: 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b 22 64 65 66 61 75 Data Ascii: urn new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s["defau
2024-10-28 01:06:45 UTC	16383	IN	Data Raw: 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 61 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 6f 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 29 66 6f 72 28 3b 65 2d 2d 3b 29 74 3d 69 28 74 2c 75 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 6f 74 6f 74 79 70 Data Ascii: ts=function(t,e){if(a&&"string"==typeof t&&!o.prepareStackTrace)for(;e--;)t=i(t,u,"");return t}},function(t,e,r){"use strict";var n=r(537);t.exports=!n((function(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.prototyp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49768	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:45 UTC	622	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:45 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6118624 Cache-Control: public, max-age=31536000 Content-MD5: betEqf4nMmbvq8MhS5mLoA== Content-Type: application/x-javascript Date: Mon, 28 Oct 2024 01:06:45 GMT Etag: 0x8DCBD52F3A242D0 Last-Modified: Thu, 15 Aug 2024 17:51:55 GMT Server: ECAcc (lhc/7941) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bbd0cf2c-501e-006f-482f-f15e3d000000 x-ms-version: 2009-09-19 Content-Length: 15755 Connection: close
2024-10-28 01:06:45 UTC	15755	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49770	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:45 UTC	670	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:45 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18818832 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Mon, 28 Oct 2024 01:06:45 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7945) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c8ea465c-601e-0025-11ad-7d4c1f000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-10-28 01:06:45 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49769	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:45 UTC	664	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:45 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18819010 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Mon, 28 Oct 2024 01:06:45 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7941) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d63faa2-d01e-009e-5cad-7d1f4c000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-10-28 01:06:45 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49771	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:46 UTC	425	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:46 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18818833 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Mon, 28 Oct 2024 01:06:46 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7945) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c8ea465c-601e-0025-11ad-7d4c1f000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-10-28 01:06:46 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49772	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:46 UTC	419	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:46 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18819011 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Mon, 28 Oct 2024 01:06:46 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7941) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d63faa2-d01e-009e-5cad-7d1f4c000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-10-28 01:06:46 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49775	13.107.246.45	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:46 UTC	703	OUT	GET /81d6b03a-bocptwwhbyyvw9ygnh-lj9smgsjc671bhchkes1kg-q/logintenantbranding/0/illustration?ts=636942574602374519 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:48 UTC	713	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:06:48 GMT Content-Type: image/* Content-Length: 269744 Connection: close Last-Modified: Wed, 28 Apr 2021 09:44:10 GMT ETag: 0x8D90A2A2CE1D439 x-ms-request-id: 479eca78-601e-0061-17d5-2859f7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T010646Z-16849878b7867ttgfbpnfxt44s000000044g00000000ednc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-28 01:06:48 UTC	15671	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 55 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyUhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xm
2024-10-28 01:06:48 UTC	16384	IN	Data Raw: 39 78 ec fa e5 cf e8 b8 fd 6f d1 6f 6c 1e f6 3d ad fb c9 e5 c7 73 2f b7 1e 72 b1 e6 36 51 68 7d ee 9f 49 cf b7 d4 ac c1 30 1f 89 b1 ba 6d 3b 9a 62 32 0e 73 38 5c 70 25 7c 57 9f ed 5e 47 85 b6 39 b4 ba fe ab f6 5e 8f af f0 bd cf 83 cb 99 e2 da 5f d7 3e d9 d5 ea 51 5e 7e 1d c7 0e 31 dc 8c 01 07 03 8e 29 19 20 10 41 12 01 20 cb 34 11 f3 41 91 d8 90 24 03 e1 da 80 40 20 1d be 53 1c d0 56 65 66 8d 48 b7 7a c7 7d 5e 7f 37 1e 12 f1 2c f0 e4 ba 9e 21 18 2e c2 2e 92 30 a9 a8 1e f0 31 f1 55 23 5d 75 46 e7 66 ae 47 4e 9a a2 79 8e 0b 47 56 93 d0 28 59 20 12 01 20 17 6a 01 90 0a 28 04 80 52 40 21 f1 40 24 02 de 80 51 d8 80 59 c1 00 93 05 18 24 0a 39 a6 0a 28 06 8e 41 00 a3 b1 00 8f c5 00 a3 92 0c a2 80 68 8c 90 0a 23 3c 12 05 14 11 b7 20 11 23 ee 41 94 76 20 8d 19 ee Data Ascii: 9xool=s/r6Qh}I0m;b2s8\p%\|W^G9^_>Q^~1) A 4A$@ SVefHz}^7,!..01U#]uFfGNyGV(Y j(R@!@$QY$9(Ah#< #Av
2024-10-28 01:06:48 UTC	16384	IN	Data Raw: fc a5 e5 fe 67 8f 74 bd 74 bf a2 fa cf da c7 fc fd 7a e6 de 9d fb 56 b1 e9 1e 9d 5b 83 5e e7 cd 46 9d b5 56 03 07 1d 37 4b 2c bd b8 70 22 7f e3 bf 0e d3 b4 38 ac 3e 54 f1 3f 33 c8 bb de 9a 4f d3 7d 27 e8 cb 4f 99 fc af cb e0 9a 4e bb df d1 3d 7f 73 f1 82 b2 fb fe 47 c2 6a 86 95 0a b7 15 d9 42 83 4d 4a f5 1c 18 ca 6c 05 ce 73 9c 60 00 02 64 92 b9 76 b8 6b 3d 5f bb be d1 ba 2b 4b db ef b7 2e 52 e9 2f 00 66 a7 a6 d8 53 76 a9 c3 03 c5 a8 5c 93 75 76 62 31 1e bd 47 01 ba 0b f1 bf 73 f2 ff 00 c4 f3 ef c9 f0 b7 d3 ec e9 3f 43 f5 9f 6e f1 7f c3 f0 6b a7 c6 4f 5f b7 e3 fa 5f 98 7f 9c 21 8f be 2d 68 ff 00 f2 3b 48 ff 00 91 35 7e 85 f2 b7 f9 3d 7e db fa df 07 f3 2f f9 ab f6 4f d4 f9 9a 80 5f 51 a3 e6 f6 5c a2 17 56 ae 6d 9f aa 1f de 5b 69 1a bf 46 bf c8 73 47 fc 26 Data Ascii: gttzV[^FV7K,p"8>T?3O}'ON=sGjBMJls`dvk=_+K.R/fSv\uvb1Gs?CnkO__!-h;H5~=~/O_Q\Vm[iFsG&
2024-10-28 01:06:48 UTC	16384	IN	Data Raw: 5d 61 b4 9d 77 ab 56 61 13 6d 4d 42 f5 d5 6e 9c d3 8f 0f a9 c3 b0 2f 91 f3 fd e3 c9 f3 3f ea ef 76 9f 47 49 f8 4f 47 d4 78 5e d5 e3 f8 9f f4 b4 93 eb f8 fe 37 d5 eb cb cd 7a 05 28 ee 40 2e d4 c1 f7 24 0f 9c 50 08 78 c1 00 e3 04 81 63 d8 80 70 80 78 04 8f 06 38 6e 46 40 67 04 03 14 19 be 48 04 80 50 40 3f 62 01 20 1f 69 cd 04 51 28 07 8c e0 12 04 4c 10 0a 29 82 c9 00 a2 90 30 33 92 0c 6d 40 10 4a 84 8d 3b 52 03 6c 82 9a 69 19 82 2d 03 61 18 29 31 8f 82 00 9b 04 19 e2 91 9d 00 f2 40 22 62 80 51 86 f4 02 8c 53 06 8c d2 c9 18 90 83 31 22 08 01 29 90 49 f1 41 05 c9 1c 46 66 98 46 e8 77 2a 4a 37 12 83 46 e8 64 9a 40 ed ea 81 8a 01 93 04 82 24 81 18 77 a6 0d 82 59 06 74 c2 0d 56 e1 2a ad 59 b7 b9 a0 d8 7a 9c 20 5c 73 41 39 8d 67 e9 2a 36 11 ca ea a4 12 65 38 ac Data Ascii: ]awVamMBn/?vGIOGx^7z(@.$Pxcpx8nF@gHP@?b iQ(L)03m@J;Rli-a)1@"bQS1")IAFfFwJ7Fd@$wYtVYz \sA9g*6e8
2024-10-28 01:06:48 UTC	16384	IN	Data Raw: a7 cc dc a3 75 f8 2e 65 b1 ad 67 71 12 1b eb b0 86 ba 19 b1 df 4b 86 f0 4a ac a2 aa 87 08 4d 34 9a a3 a1 20 95 39 15 ea b8 c6 01 2a b9 14 6f 5f e4 2b 3a a9 1c af 32 b8 0a 4f 27 7a cf e2 5b fa 47 95 6b b5 8d 4d 41 fb 89 0b a7 49 e8 e7 d1 56 91 f3 40 60 a9 71 a3 67 1c 4e 68 8b 69 52 32 dc 33 56 9d 84 76 b7 1f b9 04 5c 52 87 c1 00 e0 c4 20 23 b9 89 6c f0 4c 46 56 a3 18 6e cd 2a 6e 6f 57 03 84 ca 7b 94 d4 b9 9d 56 11 31 f1 59 ec 23 19 f2 9f c1 64 b8 8c c3 3c 72 09 83 18 92 99 81 d8 c4 26 54 d2 41 05 c2 22 53 ec 48 40 19 e2 83 30 13 84 10 12 30 78 e0 50 13 52 c7 04 53 59 a4 04 40 52 71 61 80 42 19 24 43 02 13 4c ce 7e 08 01 02 71 f8 26 47 9e 78 a6 09 82 0f 01 38 55 bd a1 c7 8c 66 56 91 9b b5 d0 c1 20 37 3c 16 b0 dd 56 9c 22 d1 f0 55 0a b4 e9 88 b7 7a 68 a8 eb Data Ascii: u.egqKJM4 9o_+:2O'z[GkMAIV@`qgNhiR23Vv\R #lLFVnnoW{V1Y#d<r&TA"SH@00xPRSY@RqaB$CL~q&Gx8UfV 7<V"Uzh
2024-10-28 01:06:48 UTC	16384	IN	Data Raw: 34 82 e5 90 8c 01 40 8d 7b 26 44 44 a9 aa 8d 4b 5a 72 11 f8 a9 5a fd 1a 70 1e 05 01 33 69 c4 6f 13 4b 26 36 d2 38 9e c4 80 85 28 20 60 fe 88 32 38 aa 23 8a 24 3b 09 09 27 03 57 4a a7 3d a4 2d 23 37 55 a4 b0 70 8f 15 ae a9 ad eb 36 40 0d ab 58 8a b6 40 84 d1 82 57 a9 4c 93 2f d8 98 54 bc b6 79 69 f8 a8 b4 e3 0b 54 a4 40 20 8e e5 95 ab 95 96 18 78 f7 e2 94 15 ab a7 8c 36 ca 11 5b 6a ce b6 2c d8 48 80 56 9a d0 a7 49 d0 9e 0a b2 83 96 92 21 9a 60 24 14 64 00 b4 c1 19 04 69 bb 21 8a 32 49 0d 8d c7 f4 52 ee 85 93 b7 4c ba 70 88 6c b3 29 77 c1 93 0d 2e bc 60 42 3f 30 f2 4f d2 ab 35 b1 82 27 20 cb e9 2a cd 1c 50 32 9a e9 8c aa 56 0d d1 1b 95 04 b4 a4 e0 49 96 65 04 d1 b6 8c 88 c4 a9 c1 c5 fa 02 30 0a 16 bd 68 22 64 a6 86 8d ab 21 88 92 ce aa 2f 5b b4 44 7c 92 aa Data Ascii: 4@{&DDKZrZp3ioK&68( `28#$;'WJ=-#7Up6@X@WL/TyiT@ x6[j,HVI!`$di!2IRLpl)w.`B?0O5' *P2VIe0h"d!/[D\|
2024-10-28 01:06:48 UTC	16384	IN	Data Raw: 70 21 55 d0 19 ac 9a 44 15 62 27 81 c1 00 cd a6 5c 61 9a 61 35 2b 52 e0 09 1b 13 ca 72 b7 43 4c e3 81 82 9b 4f 0b 4c d1 b8 a2 61 e2 97 70 c2 66 e8 b1 74 87 7c 14 e4 d6 2d f4 28 b8 08 47 bb 24 bb 86 1a 9a 76 83 12 25 3c ce c4 ad 39 1b fa 6e 8c 07 08 0d f2 fd ea 36 b9 69 35 6e d8 e9 0e 00 08 4f 0c 14 d6 92 35 6d 74 d1 c2 25 da 95 8a 5e a3 a7 c3 24 60 2c d2 b0 03 70 cb bd 03 29 e9 d9 80 24 26 8c 0b 46 db 23 39 4f 24 f0 59 48 cb 3f 30 88 d8 9e 05 ad ad 02 97 a3 74 c7 ec 33 88 5d 1c 71 cb cb d1 dd 68 55 80 a8 e6 85 d3 a7 46 5b 75 8d cb 2a d1 70 82 d2 23 66 8d 1a 84 89 2b 45 49 5e 85 bd ed b3 ed 6e d8 da b6 b5 1a 59 52 9d 40 1c c7 34 c8 82 0c 88 29 93 c6 fa ab ed 63 4c d5 1b 57 58 e9 d3 9b 67 a8 4d cf d3 6a 93 f8 77 9c 7f 86 e3 36 1d c7 cb d8 92 b0 f9 e3 9a 74 Data Ascii: p!UDb'\aa5+RrCLOLapft\|-(G$v%<9n6i5nO5mt%^$`,p)$&F#9O$YH?0t3]qhUF[u*p#f+EI^nYR@4)cLWXgMjw6t
2024-10-28 01:06:48 UTC	16384	IN	Data Raw: 8e ca 8e 27 59 30 71 27 15 86 cd f5 0f 2a ff 00 f1 cd b0 ee 5c fc dd 15 b7 58 f7 be 9c ff 00 89 a7 0c 60 bc bd ba bb b8 5e a5 a3 10 58 02 bd 1b 56 e5 b7 d3 00 b7 8c aa 67 62 ad 01 92 44 13 82 40 27 04 18 1d 82 02 bd cc c1 29 55 46 36 ab 81 19 ac ab 68 e7 ef 7e a3 b1 4c 46 ca ad 10 3b d5 4a 4b 34 04 88 cb 24 37 d4 17 71 2c 3b 3e f4 0a e1 f9 c6 3c 0e 9e d8 c1 5e ac 36 79 1f 36 47 f1 07 b4 cd 75 ea e1 e4 43 a0 c2 20 83 9c 02 ea f1 fa 8d 5d b6 86 d8 b0 01 9e 0b df f1 e2 dd 25 93 00 60 94 0e 61 7b 3c 31 1b 34 a8 30 43 ee 5d ba b1 d8 d7 4d f2 4e 4b a7 8d 95 ea ac da 50 7c c2 da d0 b7 6b 4c 88 13 88 dc b9 79 29 37 34 b1 30 bc ce 71 1d 1e 9a 04 97 93 cc a8 dc b3 32 0b ce dd 71 a7 6c 24 b0 d8 d7 28 ac c9 66 9f d3 bd 10 54 83 08 a6 9a 59 44 26 47 10 c5 30 64 c8 90 Data Ascii: 'Y0q'*\X`^XVgbD@')UF6h~LF;JK4$7q,;><^6y6GuC ]%`a{<140C]MNKP\|kLy)740q2ql$(fTYD&G0d
2024-10-28 01:06:48 UTC	16384	IN	Data Raw: a9 5b 03 20 24 ae 26 9d ee 97 7a a8 83 b0 c2 79 7e b5 50 aa 4c 71 54 45 11 86 5b d0 0f 11 9f 6c 90 08 c8 c6 51 40 31 10 96 48 08 df 01 d8 80 81 df 14 1a 2a 86 11 09 06 87 2f 40 d6 db 1f b0 5c fc ca d7 ab bd e5 e1 21 b5 79 bb ba f5 75 5a 77 d2 36 2c 5a 35 ad 44 40 82 09 69 ad 03 04 cb 22 82 00 2a 08 84 08 a5 74 31 d8 a6 9b 13 55 12 23 34 f0 6e 2f 9a 61 c2 63 84 16 bc 68 d9 e6 fa f1 85 c1 10 ed 8f 6a f4 38 dc f1 98 e3 0c 77 c4 ab ad 16 f4 5f f8 dc 73 94 41 58 72 f4 16 bd 1f 95 87 95 b2 9c 97 97 c9 1b e9 5d be 92 3c 81 62 b6 ed 98 90 da ae 15 ad 0a 22 40 2d 23 3a b1 4c 1e e5 72 21 2b 70 54 93 c1 50 28 66 91 14 0e 58 a6 0b 2d 99 20 18 a4 0c 4c 12 30 97 24 66 2f 9a 01 07 84 01 07 a7 92 c0 d8 fc d3 c9 0e 31 11 cd 30 78 94 c1 89 48 22 aa e1 05 35 51 4e eb e9 2b Data Ascii: [ $&zy~PLqTE[lQ@1H/@\!yuZw6,Z5D@i"t1U#4n/achj8w_sAXr]<b"@-#:Lr!+pTP(fX- L0$f/10xH"5QN+
2024-10-28 01:06:48 UTC	16384	IN	Data Raw: 0e 04 19 64 a2 d6 d2 2e d2 b8 04 4a 63 0e f4 bb 8f 07 a9 50 c2 26 43 25 16 9a b9 74 5c 63 d8 b2 5a 1a c4 4e 06 70 82 b8 ce aa d5 c3 fc 1c 07 de b5 d5 34 d1 04 4b ef 57 12 af 72 4c 27 82 61 57 29 a0 11 20 62 65 f1 40 37 d4 60 dc f3 ef 4e 02 c4 ef ed 40 38 24 e3 22 13 01 74 04 86 18 1f 14 a8 09 39 60 77 a4 08 91 82 0c a4 4c 31 3b 10 11 d4 c2 58 62 91 a3 17 4e a2 f8 b0 cb 66 d5 9d 3c 2e 59 f3 1d 5a 30 11 80 1b 76 2c 36 d0 e5 c3 5e cb 9e 05 1f a9 f0 ed 58 6d c4 7d ed 8b 3e a1 d1 00 46 a4 96 77 8e ab bf 0b 67 a8 b4 21 01 50 47 64 52 fc b1 f9 aa 77 9c ff 00 4c 83 07 fc 55 ce 34 f7 b2 6f b9 d0 54 90 74 b0 86 0b 5d 78 ca ee c8 bc d7 9f 70 4c 1d de ba 34 d7 09 ca a9 ac ea a2 2e c6 3e 2b 74 e0 4c 73 70 da 65 04 0c 08 96 89 1c 70 8e d4 04 35 0c c0 c1 b9 41 2a 21 e8 Data Ascii: d.JcP&C%t\cZNp4KWrL'aW) be@7`N@8$"t9`wL1;XbNf<.YZ0v,6^Xm}>Fwg!PGdRwLU4oTt]xpL4.>+tLspep5A*!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49774	13.107.246.45	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:46 UTC	701	OUT	GET /81d6b03a-bocptwwhbyyvw9ygnh-lj9smgsjc671bhchkes1kg-q/logintenantbranding/0/bannerlogo?ts=636942579048543754 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:47 UTC	718	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:06:47 GMT Content-Type: image/* Content-Length: 4075 Connection: close Last-Modified: Wed, 28 Apr 2021 09:44:08 GMT ETag: 0x8D90A2A2BCB4FF3 x-ms-request-id: 8075f71b-e01e-000d-11d5-28b260000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T010646Z-15b8d89586f42m673h1quuee4s000000089g00000000bv9v x-fd-int-roxy-purgeid: 50755578 X-Cache: TCP_MISS X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-28 01:06:47 UTC	4075	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 18 00 00 00 3c 08 06 00 00 00 bd c4 a5 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDR<tEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49773	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:46 UTC	437	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:46 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6118625 Cache-Control: public, max-age=31536000 Content-MD5: betEqf4nMmbvq8MhS5mLoA== Content-Type: application/x-javascript Date: Mon, 28 Oct 2024 01:06:46 GMT Etag: 0x8DCBD52F3A242D0 Last-Modified: Thu, 15 Aug 2024 17:51:55 GMT Server: ECAcc (lhc/7941) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bbd0cf2c-501e-006f-482f-f15e3d000000 x-ms-version: 2009-09-19 Content-Length: 15755 Connection: close
2024-10-28 01:06:47 UTC	15755	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49776	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:46 UTC	651	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:47 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18818885 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Mon, 28 Oct 2024 01:06:47 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-10-28 01:06:47 UTC	15682	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-28 01:06:47 UTC	1492	IN	Data Raw: 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""33

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49780	13.107.246.60	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:48 UTC	456	OUT	GET /81d6b03a-bocptwwhbyyvw9ygnh-lj9smgsjc671bhchkes1kg-q/logintenantbranding/0/bannerlogo?ts=636942579048543754 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:48 UTC	738	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:06:48 GMT Content-Type: image/* Content-Length: 4075 Connection: close Last-Modified: Wed, 28 Apr 2021 09:44:08 GMT ETag: 0x8D90A2A2BCB4FF3 x-ms-request-id: 8075f71b-e01e-000d-11d5-28b260000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T010648Z-16849878b78p8hrf1se7fucxk8000000059g00000000038h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-28 01:06:48 UTC	4075	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 18 00 00 00 3c 08 06 00 00 00 bd c4 a5 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDR<tEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49779	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:48 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:48 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18818886 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Mon, 28 Oct 2024 01:06:48 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-10-28 01:06:48 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-28 01:06:48 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49782	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:49 UTC	665	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:49 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18732714 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Mon, 28 Oct 2024 01:06:49 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-10-28 01:06:49 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49783	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:49 UTC	626	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:49 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6269707 Cache-Control: public, max-age=31536000 Content-MD5: 07aumYbfJEqwNBLMcAM10A== Content-Type: application/x-javascript Date: Mon, 28 Oct 2024 01:06:49 GMT Etag: 0x8DCBD52F42903D2 Last-Modified: Thu, 15 Aug 2024 17:51:56 GMT Server: ECAcc (lhc/78A7) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 22797220-301e-0043-49cf-ef2c70000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-10-28 01:06:49 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-28 01:06:49 UTC	16383	IN	Data Raw: 75 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 Data Ascii: u200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u2
2024-10-28 01:06:49 UTC	2	IN	Data Raw: 32 39 Data Ascii: 29
2024-10-28 01:06:49 UTC	16383	IN	Data Raw: 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 61 22 Data Ascii: 0f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdca"
2024-10-28 01:06:49 UTC	16383	IN	Data Raw: 72 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 34 29 2c 74 2e 43 63 3d 72 28 38 38 35 29 2c 74 2e 43 66 3d 72 28 31 33 38 31 29 2c 74 2e 50 3d 72 28 37 38 34 29 2c 74 2e 5a 3d 72 28 38 38 36 29 7d 2c 31 33 38 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d 5c 75 Data Ascii: rict";t.Any=r(884),t.Cc=r(885),t.Cf=r(1381),t.P=r(784),t.Z=r(886)},1381:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-\u
2024-10-28 01:06:49 UTC	16383	IN	Data Raw: 61 72 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 6b Data Ascii: arks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.mark
2024-10-28 01:06:49 UTC	16383	IN	Data Raw: 72 6e 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 Data Ascii: rn r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a"
2024-10-28 01:06:50 UTC	15469	IN	Data Raw: 62 61 6c 61 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d Data Ascii: balance_pairs","emphasis","text_collapse"]}}}},1428:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49786	13.107.246.60	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:50 UTC	458	OUT	GET /81d6b03a-bocptwwhbyyvw9ygnh-lj9smgsjc671bhchkes1kg-q/logintenantbranding/0/illustration?ts=636942574602374519 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:51 UTC	733	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:06:51 GMT Content-Type: image/* Content-Length: 269744 Connection: close Last-Modified: Wed, 28 Apr 2021 09:44:10 GMT ETag: 0x8D90A2A2CE1D439 x-ms-request-id: 479eca78-601e-0061-17d5-2859f7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241028T010651Z-16849878b78qfbkc5yywmsbg0c000000042g000000002dwe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-28 01:06:51 UTC	15651	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 55 00 00 ff e1 03 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyUhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xm
2024-10-28 01:06:51 UTC	16384	IN	Data Raw: f4 fb 79 eb c3 c9 2f d5 b4 c7 e9 99 fd 51 ed f8 9f 3c e9 7d 39 78 ec fa e5 cf e8 b8 fd 6f d1 6f 6c 1e f6 3d ad fb c9 e5 c7 73 2f b7 1e 72 b1 e6 36 51 68 7d ee 9f 49 cf b7 d4 ac c1 30 1f 89 b1 ba 6d 3b 9a 62 32 0e 73 38 5c 70 25 7c 57 9f ed 5e 47 85 b6 39 b4 ba fe ab f6 5e 8f af f0 bd cf 83 cb 99 e2 da 5f d7 3e d9 d5 ea 51 5e 7e 1d c7 0e 31 dc 8c 01 07 03 8e 29 19 20 10 41 12 01 20 cb 34 11 f3 41 91 d8 90 24 03 e1 da 80 40 20 1d be 53 1c d0 56 65 66 8d 48 b7 7a c7 7d 5e 7f 37 1e 12 f1 2c f0 e4 ba 9e 21 18 2e c2 2e 92 30 a9 a8 1e f0 31 f1 55 23 5d 75 46 e7 66 ae 47 4e 9a a2 79 8e 0b 47 56 93 d0 28 59 20 12 01 20 17 6a 01 90 0a 28 04 80 52 40 21 f1 40 24 02 de 80 51 d8 80 59 c1 00 93 05 18 24 0a 39 a6 0a 28 06 8e 41 00 a3 b1 00 8f c5 00 a3 92 0c a2 80 68 8c Data Ascii: y/Q<}9xool=s/r6Qh}I0m;b2s8\p%\|W^G9^_>Q^~1) A 4A$@ SVefHz}^7,!..01U#]uFfGNyGV(Y j(R@!@$QY$9(Ah
2024-10-28 01:06:51 UTC	16384	IN	Data Raw: a0 05 f9 77 ce 1e 17 e5 79 33 92 74 de 7e 99 e9 7f 46 1f a4 fc a5 e5 fe 67 8f 74 bd 74 bf a2 fa cf da c7 fc fd 7a e6 de 9d fb 56 b1 e9 1e 9d 5b 83 5e e7 cd 46 9d b5 56 03 07 1d 37 4b 2c bd b8 70 22 7f e3 bf 0e d3 b4 38 ac 3e 54 f1 3f 33 c8 bb de 9a 4f d3 7d 27 e8 cb 4f 99 fc af cb e0 9a 4e bb df d1 3d 7f 73 f1 82 b2 fb fe 47 c2 6a 86 95 0a b7 15 d9 42 83 4d 4a f5 1c 18 ca 6c 05 ce 73 9c 60 00 02 64 92 b9 76 b8 6b 3d 5f bb be d1 ba 2b 4b db ef b7 2e 52 e9 2f 00 66 a7 a6 d8 53 76 a9 c3 03 c5 a8 5c 93 75 76 62 31 1e bd 47 01 ba 0b f1 bf 73 f2 ff 00 c4 f3 ef c9 f0 b7 d3 ec e9 3f 43 f5 9f 6e f1 7f c3 f0 6b a7 c6 4f 5f b7 e3 fa 5f 98 7f 9c 21 8f be 2d 68 ff 00 f2 3b 48 ff 00 91 35 7e 85 f2 b7 f9 3d 7e db fa df 07 f3 2f f9 ab f6 4f d4 f9 9a 80 5f 51 a3 e6 f6 5c Data Ascii: wy3t~FgttzV[^FV7K,p"8>T?3O}'ON=sGjBMJls`dvk=_+K.R/fSv\uvb1Gs?CnkO__!-h;H5~=~/O_Q\
2024-10-28 01:06:51 UTC	16384	IN	Data Raw: fd b2 fb 0a f6 81 ec f2 cc 51 f6 ed c8 5a 67 2f 6a 85 9e 8d 5d 61 b4 9d 77 ab 56 61 13 6d 4d 42 f5 d5 6e 9c d3 8f 0f a9 c3 b0 2f 91 f3 fd e3 c9 f3 3f ea ef 76 9f 47 49 f8 4f 47 d4 78 5e d5 e3 f8 9f f4 b4 93 eb f8 fe 37 d5 eb cb cd 7a 05 28 ee 40 2e d4 c1 f7 24 0f 9c 50 08 78 c1 00 e3 04 81 63 d8 80 70 80 78 04 8f 06 38 6e 46 40 67 04 03 14 19 be 48 04 80 50 40 3f 62 01 20 1f 69 cd 04 51 28 07 8c e0 12 04 4c 10 0a 29 82 c9 00 a2 90 30 33 92 0c 6d 40 10 4a 84 8d 3b 52 03 6c 82 9a 69 19 82 2d 03 61 18 29 31 8f 82 00 9b 04 19 e2 91 9d 00 f2 40 22 62 80 51 86 f4 02 8c 53 06 8c d2 c9 18 90 83 31 22 08 01 29 90 49 f1 41 05 c9 1c 46 66 98 46 e8 77 2a 4a 37 12 83 46 e8 64 9a 40 ed ea 81 8a 01 93 04 82 24 81 18 77 a6 0d 82 59 06 74 c2 0d 56 e1 2a ad 59 b7 b9 a0 d8 Data Ascii: QZg/j]awVamMBn/?vGIOGx^7z(@.$Pxcpx8nF@gHP@?b iQ(L)03m@J;Rli-a)1@"bQS1")IAFfFwJ7Fd@$wYtVY
2024-10-28 01:06:51 UTC	16384	IN	Data Raw: 32 2d 2f 61 4a b4 36 0a 83 c8 e3 da 1a b5 9b 22 c7 9c eb bc a7 cc dc a3 75 f8 2e 65 b1 ad 67 71 12 1b eb b0 86 ba 19 b1 df 4b 86 f0 4a ac a2 aa 87 08 4d 34 9a a3 a1 20 95 39 15 ea b8 c6 01 2a b9 14 6f 5f e4 2b 3a a9 1c af 32 b8 0a 4f 27 7a cf e2 5b fa 47 95 6b b5 8d 4d 41 fb 89 0b a7 49 e8 e7 d1 56 91 f3 40 60 a9 71 a3 67 1c 4e 68 8b 69 52 32 dc 33 56 9d 84 76 b7 1f b9 04 5c 52 87 c1 00 e0 c4 20 23 b9 89 6c f0 4c 46 56 a3 18 6e cd 2a 6e 6f 57 03 84 ca 7b 94 d4 b9 9d 56 11 31 f1 59 ec 23 19 f2 9f c1 64 b8 8c c3 3c 72 09 83 18 92 99 81 d8 c4 26 54 d2 41 05 c2 22 53 ec 48 40 19 e2 83 30 13 84 10 12 30 78 e0 50 13 52 c7 04 53 59 a4 04 40 52 71 61 80 42 19 24 43 02 13 4c ce 7e 08 01 02 71 f8 26 47 9e 78 a6 09 82 0f 01 38 55 bd a1 c7 8c 66 56 91 9b b5 d0 c1 20 Data Ascii: 2-/aJ6"u.egqKJM4 9o_+:2O'z[GkMAIV@`qgNhiR23Vv\R #lLFVnnoW{V1Y#d<r&TA"SH@00xPRSY@RqaB$CL~q&Gx8UfV
2024-10-28 01:06:51 UTC	16384	IN	Data Raw: 26 0c ac df 35 27 76 3c 4b bb 1d ca b2 58 65 76 24 46 18 c7 34 82 e5 90 8c 01 40 8d 7b 26 44 44 a9 aa 8d 4b 5a 72 11 f8 a9 5a fd 1a 70 1e 05 01 33 69 c4 6f 13 4b 26 36 d2 38 9e c4 80 85 28 20 60 fe 88 32 38 aa 23 8a 24 3b 09 09 27 03 57 4a a7 3d a4 2d 23 37 55 a4 b0 70 8f 15 ae a9 ad eb 36 40 0d ab 58 8a b6 40 84 d1 82 57 a9 4c 93 2f d8 98 54 bc b6 79 69 f8 a8 b4 e3 0b 54 a4 40 20 8e e5 95 ab 95 96 18 78 f7 e2 94 15 ab a7 8c 36 ca 11 5b 6a ce b6 2c d8 48 80 56 9a d0 a7 49 d0 9e 0a b2 83 96 92 21 9a 60 24 14 64 00 b4 c1 19 04 69 bb 21 8a 32 49 0d 8d c7 f4 52 ee 85 93 b7 4c ba 70 88 6c b3 29 77 c1 93 0d 2e bc 60 42 3f 30 f2 4f d2 ab 35 b1 82 27 20 cb e9 2a cd 1c 50 32 9a e9 8c aa 56 0d d1 1b 95 04 b4 a4 e0 49 96 65 04 d1 b6 8c 88 c4 a9 c1 c5 fa 02 30 0a 16 Data Ascii: &5'v<KXev$F4@{&DDKZrZp3ioK&68( `28#$;'WJ=-#7Up6@X@WL/TyiT@ x6[j,HVI!`$di!2IRLpl)w.`B?0O5' *P2VIe0
2024-10-28 01:06:51 UTC	16384	IN	Data Raw: 3f 99 6a c5 ae f8 a8 0f 35 e6 c7 03 c6 76 46 4b 2d d9 d7 11 70 21 55 d0 19 ac 9a 44 15 62 27 81 c1 00 cd a6 5c 61 9a 61 35 2b 52 e0 09 1b 13 ca 72 b7 43 4c e3 81 82 9b 4f 0b 4c d1 b8 a2 61 e2 97 70 c2 66 e8 b1 74 87 7c 14 e4 d6 2d f4 28 b8 08 47 bb 24 bb 86 1a 9a 76 83 12 25 3c ce c4 ad 39 1b fa 6e 8c 07 08 0d f2 fd ea 36 b9 69 35 6e d8 e9 0e 00 08 4f 0c 14 d6 92 35 6d 74 d1 c2 25 da 95 8a 5e a3 a7 c3 24 60 2c d2 b0 03 70 cb bd 03 29 e9 d9 80 24 26 8c 0b 46 db 23 39 4f 24 f0 59 48 cb 3f 30 88 d8 9e 05 ad ad 02 97 a3 74 c7 ec 33 88 5d 1c 71 cb cb d1 dd 68 55 80 a8 e6 85 d3 a7 46 5b 75 8d cb 2a d1 70 82 d2 23 66 8d 1a 84 89 2b 45 49 5e 85 bd ed b3 ed 6e d8 da b6 b5 1a 59 52 9d 40 1c c7 34 c8 82 0c 88 29 93 c6 fa ab ed 63 4c d5 1b 57 58 e9 d3 9b 67 a8 4d cf Data Ascii: ?j5vFK-p!UDb'\aa5+RrCLOLapft\|-(G$v%<9n6i5nO5mt%^$`,p)$&F#9O$YH?0t3]qhUF[u*p#f+EI^nYR@4)cLWXgM
2024-10-28 01:06:51 UTC	16384	IN	Data Raw: 7d 10 48 dc fe b3 f4 b8 8c 14 55 47 07 cc e4 87 38 9f ab 05 8e ca 8e 27 59 30 71 27 15 86 cd f5 0f 2a ff 00 f1 cd b0 ee 5c fc dd 15 b7 58 f7 be 9c ff 00 89 a7 0c 60 bc bd ba bb b8 5e a5 a3 10 58 02 bd 1b 56 e5 b7 d3 00 b7 8c aa 67 62 ad 01 92 44 13 82 40 27 04 18 1d 82 02 bd cc c1 29 55 46 36 ab 81 19 ac ab 68 e7 ef 7e a3 b1 4c 46 ca ad 10 3b d5 4a 4b 34 04 88 cb 24 37 d4 17 71 2c 3b 3e f4 0a e1 f9 c6 3c 0e 9e d8 c1 5e ac 36 79 1f 36 47 f1 07 b4 cd 75 ea e1 e4 43 a0 c2 20 83 9c 02 ea f1 fa 8d 5d b6 86 d8 b0 01 9e 0b df f1 e2 dd 25 93 00 60 94 0e 61 7b 3c 31 1b 34 a8 30 43 ee 5d ba b1 d8 d7 4d f2 4e 4b a7 8d 95 ea ac da 50 7c c2 da d0 b7 6b 4c 88 13 88 dc b9 79 29 37 34 b1 30 bc ce 71 1d 1e 9a 04 97 93 cc a8 dc b3 32 0b ce dd 71 a7 6c 24 b0 d8 d7 28 ac c9 Data Ascii: }HUG8'Y0q'*\X`^XVgbD@')UF6h~LF;JK4$7q,;><^6y6GuC ]%`a{<140C]MNKP\|kLy)740q2ql$(
2024-10-28 01:06:51 UTC	16384	IN	Data Raw: 13 9e d5 82 e2 2a 90 9e 7b 82 db 54 6c 82 3e 6d 87 72 de 31 a9 5b 03 20 24 ae 26 9d ee 97 7a a8 83 b0 c2 79 7e b5 50 aa 4c 71 54 45 11 86 5b d0 0f 11 9f 6c 90 08 c8 c6 51 40 31 10 96 48 08 df 01 d8 80 81 df 14 1a 2a 86 11 09 06 87 2f 40 d6 db 1f b0 5c fc ca d7 ab bd e5 e1 21 b5 79 bb ba f5 75 5a 77 d2 36 2c 5a 35 ad 44 40 82 09 69 ad 03 04 cb 22 82 00 2a 08 84 08 a5 74 31 d8 a6 9b 13 55 12 23 34 f0 6e 2f 9a 61 c2 63 84 16 bc 68 d9 e6 fa f1 85 c1 10 ed 8f 6a f4 38 dc f1 98 e3 0c 77 c4 ab ad 16 f4 5f f8 dc 73 94 41 58 72 f4 16 bd 1f 95 87 95 b2 9c 97 97 c9 1b e9 5d be 92 3c 81 62 b6 ed 98 90 da ae 15 ad 0a 22 40 2d 23 3a b1 4c 1e e5 72 21 2b 70 54 93 c1 50 28 66 91 14 0e 58 a6 0b 2d 99 20 18 a4 0c 4c 12 30 97 24 66 2f 9a 01 07 84 01 07 a7 92 c0 d8 fc d3 c9 Data Ascii: {Tl>mr1[ $&zy~PLqTE[lQ@1H/@\!yuZw6,Z5D@i"*t1U#4n/achj8w_sAXr]<b"@-#:Lr!+pTP(fX- L0$f/
2024-10-28 01:06:51 UTC	16384	IN	Data Raw: 12 c0 4e 48 de fa 14 88 ad 6b ef de 26 b9 6d 75 68 bf 46 e2 0e 04 19 64 a2 d6 d2 2e d2 b8 04 4a 63 0e f4 bb 8f 07 a9 50 c2 26 43 25 16 9a b9 74 5c 63 d8 b2 5a 1a c4 4e 06 70 82 b8 ce aa d5 c3 fc 1c 07 de b5 d5 34 d1 04 4b ef 57 12 af 72 4c 27 82 61 57 29 a0 11 20 62 65 f1 40 37 d4 60 dc f3 ef 4e 02 c4 ef ed 40 38 24 e3 22 13 01 74 04 86 18 1f 14 a8 09 39 60 77 a4 08 91 82 0c a4 4c 31 3b 10 11 d4 c2 58 62 91 a3 17 4e a2 f8 b0 cb 66 d5 9d 3c 2e 59 f3 1d 5a 30 11 80 1b 76 2c 36 d0 e5 c3 5e cb 9e 05 1f a9 f0 ed 58 6d c4 7d ed 8b 3e a1 d1 00 46 a4 96 77 8e ab bf 0b 67 a8 b4 21 01 50 47 64 52 fc b1 f9 aa 77 9c ff 00 4c 83 07 fc 55 ce 34 f7 b2 6f b9 d0 54 90 74 b0 86 0b 5d 78 ca ee c8 bc d7 9f 70 4c 1d de ba 34 d7 09 ca a9 ac ea a2 2e c6 3e 2b 74 e0 4c 73 70 da Data Ascii: NHk&muhFd.JcP&C%t\cZNp4KWrL'aW) be@7`N@8$"t9`wL1;XbNf<.YZ0v,6^Xm}>Fwg!PGdRwLU4oTt]xpL4.>+tLsp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49787	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:51 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:51 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18732716 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Mon, 28 Oct 2024 01:06:51 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-10-28 01:06:51 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49789	152.199.21.175	443	2640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:06:51 UTC	441	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 01:06:51 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6269709 Cache-Control: public, max-age=31536000 Content-MD5: 07aumYbfJEqwNBLMcAM10A== Content-Type: application/x-javascript Date: Mon, 28 Oct 2024 01:06:51 GMT Etag: 0x8DCBD52F42903D2 Last-Modified: Thu, 15 Aug 2024 17:51:56 GMT Server: ECAcc (lhc/78A7) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 22797220-301e-0043-49cf-ef2c70000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-10-28 01:06:51 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-28 01:06:51 UTC	1	IN	Data Raw: 75 Data Ascii: u
2024-10-28 01:06:51 UTC	16383	IN	Data Raw: 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 30 Data Ascii: 200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u20
2024-10-28 01:06:51 UTC	16383	IN	Data Raw: 39 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 61 Data Ascii: 90f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdca
2024-10-28 01:06:51 UTC	16383	IN	Data Raw: 74 72 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 34 29 2c 74 2e 43 63 3d 72 28 38 38 35 29 2c 74 2e 43 66 3d 72 28 31 33 38 31 29 2c 74 2e 50 3d 72 28 37 38 34 29 2c 74 2e 5a 3d 72 28 38 38 36 29 7d 2c 31 33 38 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d 5c Data Ascii: trict";t.Any=r(884),t.Cc=r(885),t.Cf=r(1381),t.P=r(784),t.Z=r(886)},1381:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-\
2024-10-28 01:06:51 UTC	3	IN	Data Raw: 4d 61 72 Data Ascii: Mar
2024-10-28 01:06:51 UTC	16383	IN	Data Raw: 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 6b 75 70 Data Ascii: ks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.markup
2024-10-28 01:06:52 UTC	16383	IN	Data Raw: 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 2c 2d Data Ascii: r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a",-
2024-10-28 01:06:52 UTC	15467	IN	Data Raw: 6c 61 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d 22 69 Data Ascii: lance_pairs","emphasis","text_collapse"]}}}},1428:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag="i

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:13 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:13 UTC	561	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:13 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 25 Oct 2024 17:15:22 GMT ETag: "0x8DCF5189BF6C373" x-ms-request-id: c3b04d3c-601e-00ab-3aca-2766f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010713Z-17c5cb586f64v7xs992vpxwchg000000048000000000au1e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:13 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-28 01:07:13 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-28 01:07:13 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-28 01:07:13 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-28 01:07:13 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-28 01:07:14 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-28 01:07:14 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-28 01:07:14 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-28 01:07:14 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-28 01:07:14 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:15 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:15 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:15 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010715Z-16849878b7828dsgct3vrzta7000000002n000000000q653 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:15 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:15 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:15 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: c3a6d21e-601e-00ab-1dc6-2766f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010715Z-17c5cb586f626sn8grcgm1gf8000000002ug000000004tch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:15 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:15 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:15 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:15 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fc6998d3-101e-008d-52ad-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010715Z-16849878b78hh85qc40uyr8sc800000004ng0000000074k9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:15 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:15 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:15 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:15 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 5d69bbb7-d01e-008e-6d6a-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010715Z-17c5cb586f6b6kj91vqtm6kxaw000000031g000000005guv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:15 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:15 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:15 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:15 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: e9f225b3-c01e-0014-22e8-27a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010715Z-r197bdfb6b4jlq9hb8xf0re6t400000004f00000000006ap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:15 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:15 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:16 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010715Z-16849878b78g2m84h2v9sta290000000033000000000tcng x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:16 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:16 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010716Z-16849878b78wv88bk51myq5vxc00000004m000000000b3sk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:16 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:16 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:16 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:16 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010716Z-16849878b78bcpfn2qf7sm6hsn00000005xg00000000b3mm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:16 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:16 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:16 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 32193d61-901e-0015-09ca-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010716Z-r197bdfb6b4bq7nf8mnywhn9e000000005fg000000000bxm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:16 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:16 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:16 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:16 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 91249574-801e-0078-3dc7-27bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010716Z-17c5cb586f6hn8cl90dxzu28kw000000045g000000006fea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:16 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:16 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 8b699d26-501e-005b-1a2a-27d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010716Z-17c5cb586f672xmrz843mf85fn000000030000000000crdb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:17 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:16 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: a568b4a7-501e-0035-1a18-26c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010716Z-17c5cb586f6gkqkwd0x1ge8t0400000004k0000000009318 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:17 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:16 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:16 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 30dbe6fd-101e-0034-66db-2696ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010716Z-17c5cb586f6zrq5bnguxgu7frc00000004yg00000000czs0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:17 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:16 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 43a53b7c-f01e-005d-24fc-2413ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010716Z-15b8d89586frzkk2umu6w8qnt80000000mrg00000000bncp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:17 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:16 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:17 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:16 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010716Z-16849878b78z2wx67pvzz63kdg00000002u000000000qs7b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:17 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:17 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:17 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010717Z-16849878b787bfsh7zgp804my400000003500000000069wh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:17 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:17 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:17 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 9426c385-b01e-0053-505f-27cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010717Z-17c5cb586f6r59nt869u8w8xt8000000037g000000009sts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:17 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:17 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:17 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 389dace0-b01e-003d-533d-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010717Z-r197bdfb6b4hsj5bywyqk9r2xw00000005n000000000c438 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:17 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:17 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:17 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 6484a1a6-201e-0000-75a3-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010717Z-16849878b785jrf8dn0d2rczaw00000005f000000000c6wq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:17 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:17 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:17 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bd3bd0-f01e-003c-42e3-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010717Z-15b8d89586fxdh48qknu9dqk2g00000008b0000000002wsz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:17 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:18 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:18 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9956b93e-101e-0017-0e1a-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010718Z-r197bdfb6b4grkz4xgvkar0zcs00000003xg000000005bq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:18 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:18 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:18 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010718Z-16849878b78km6fmmkbenhx76n00000003rg000000003f99 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:18 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:18 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 47f8d5d2-401e-005b-1e67-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010718Z-16849878b78p49s6zkwt11bbkn000000042g000000000wge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:18 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:18 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010718Z-16849878b782d4lwcu6h6gmxnw00000003yg00000000duzf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:18 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:18 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 584104f8-c01e-008d-42fd-272eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010718Z-r197bdfb6b4qbfppwgs4nqza8000000002u000000000em0p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:18 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:19 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:19 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:19 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 54a08b66-801e-008f-529b-272c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010719Z-16849878b78g2m84h2v9sta2900000000390000000006cch x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:19 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:19 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:19 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:19 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 46a88b53-101e-0017-7e74-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010719Z-16849878b78wc6ln1zsrz6q9w800000003zg00000000ba06 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:19 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:19 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:19 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010719Z-16849878b78g2m84h2v9sta2900000000390000000006ccm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:19 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:19 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010719Z-16849878b787bfsh7zgp804my4000000030g00000000muhc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:19 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:19 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:19 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010719Z-16849878b786lft2mu9uftf3y400000005gg00000000hfbg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:19 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:20 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 488bf4d4-001e-00a2-2656-26d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010720Z-17c5cb586f6gkqkwd0x1ge8t0400000004mg000000006cdv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:20 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:20 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 8e3eac93-d01e-0017-759c-27b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010720Z-15b8d89586fwzdd8urmg0p1ebs0000000ehg00000000dr7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:20 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:20 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:20 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:20 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010720Z-16849878b78qfbkc5yywmsbg0c000000040g0000000099sh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:20 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:20 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:20 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010720Z-16849878b78fssff8btnns3b1400000004h000000000k625 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:20 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:20 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:20 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010720Z-16849878b78fkwcjkpn19c5dsn00000003c0000000006k7q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:20 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:21 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:21 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:21 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010721Z-16849878b78tg5n42kspfr0x48000000046g00000000refc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:21 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:21 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:21 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 25f4145c-101e-005a-559b-24882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010721Z-15b8d89586fhl2qtatrz3vfkf00000000aa0000000004u2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:21 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:21 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:21 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:21 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010721Z-16849878b786fl7gm2qg4r5y7000000004mg0000000092w9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:21 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:21 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:21 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0ce3105a-501e-0029-7cd2-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010721Z-16849878b78g2m84h2v9sta290000000039g000000004g03 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:21 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:21 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:21 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010721Z-16849878b78fkwcjkpn19c5dsn00000003a000000000e5c3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:21 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:22 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:22 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 395ac5b3-901e-0083-7e6a-27bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010722Z-17c5cb586f672xmrz843mf85fn000000033g000000007hvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:22 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:22 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:22 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c417f1b6-b01e-0084-279b-27d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010722Z-15b8d89586fzhrwgk23ex2bvhw00000006zg00000000d35w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:22 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:22 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:22 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010722Z-15b8d89586flspj6y6m5fk442w0000000a3g000000007rnh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:22 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:22 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:22 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 7d1d0a8a-d01e-0049-263b-26e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010722Z-17c5cb586f6wmhkn5q6fu8c5ss00000003qg000000004s95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:22 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:22 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:22 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:22 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a1cd263b-b01e-0070-5f2a-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010722Z-16849878b78qfbkc5yywmsbg0c00000003yg00000000fmkb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:22 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:23 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:23 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:23 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 18fe904c-c01e-00a1-4257-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010723Z-16849878b78qg9mlz11wgn0wcc00000003u000000000nryh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:23 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:23 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:23 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9e4d4e08-401e-0047-1d64-278597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010723Z-15b8d89586f8nxpt6ys645x5v000000005fg0000000089g6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:23 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:23 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:23 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 3802ff33-701e-0001-4310-28b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010723Z-17c5cb586f67hfgj2durhqcxk80000000370000000005bp0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:23 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:23 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:23 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010723Z-16849878b78sx229w7g7at4nkg00000002mg000000006kwv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:23 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:23 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:23 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010723Z-16849878b786jv8w2kpaf5zkqs000000032000000000tw1s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:23 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:23 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:24 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010723Z-16849878b78g2m84h2v9sta290000000038g000000007f6m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:23 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:23 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2cfbf663-801e-0083-68dc-26f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010723Z-17c5cb586f67hfgj2durhqcxk8000000036g0000000049x1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:24 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:23 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: d13b9d4f-c01e-0014-770d-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010723Z-17c5cb586f6hhlf5mrwgq3erx800000005a000000000bw9u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:23 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:24 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:24 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c2db9b5f-901e-0015-105a-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010724Z-16849878b78p49s6zkwt11bbkn0000000400000000009h9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:24 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:24 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:24 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010724Z-16849878b78bcpfn2qf7sm6hsn00000005y0000000009wds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:24 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:24 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:24 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:24 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010724Z-16849878b786jv8w2kpaf5zkqs000000036000000000d9ng x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:24 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:24 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:25 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 75bf4e1c-f01e-0085-073a-2688ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010724Z-17c5cb586f6lxnvg801rcb3n8n00000003yg00000000d0tz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:25 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:24 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:24 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010724Z-15b8d89586ff5l62aha9080wv000000005m0000000005w8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:24 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:24 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:24 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:24 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: a342e9ea-d01e-0066-419c-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010724Z-16849878b78km6fmmkbenhx76n00000003hg00000000rmyt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:24 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:25 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:25 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 0944ca5a-501e-007b-292d-275ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010725Z-r197bdfb6b466qclztvgs64z1000000005r000000000cmku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:25 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:25 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:25 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:25 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010725Z-16849878b78smng4k6nq15r6s400000005ug00000000cr77 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:25 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:25 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:25 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:25 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 5ef35a72-501e-007b-6836-285ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010725Z-15b8d89586f8nxpt6ys645x5v000000005dg00000000c3c0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:25 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:25 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:25 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:25 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010725Z-16849878b78fssff8btnns3b1400000004q0000000001nxk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:25 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:25 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:26 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: e1e6f089-901e-005b-1e15-262005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010726Z-15b8d89586fcvr6p5956n5d0rc0000000a4g00000000atb6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:26 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:26 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:26 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:26 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010726Z-16849878b78zqkvcwgr6h55x9n00000003q000000000mw2s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:26 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:26 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:26 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 933aac65-d01e-007a-51aa-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010726Z-16849878b7828dsgct3vrzta7000000002sg000000008962 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:26 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:26 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 63249b2a-c01e-0046-2e2c-262db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010726Z-17c5cb586f6fqqst87nqkbsx1c00000002r0000000006h7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:26 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:26 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:27 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 096df01f-c01e-0066-45fd-24a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010727Z-r197bdfb6b42rt68rzg9338g1g00000005f0000000008h79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:27 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:27 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:27 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:27 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010727Z-15b8d89586fxdh48qknu9dqk2g0000000890000000006q8d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:27 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:27 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:27 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010727Z-16849878b78p49s6zkwt11bbkn00000003z000000000c5e8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	52369	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:27 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: f9fbd553-601e-003e-5c2e-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010727Z-16849878b78qwx7pmw9x5fub1c00000002hg000000001w3w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	52370	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:27 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:27 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dbd91de3-001e-002b-2827-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010727Z-r197bdfb6b47gqdjqh2kwsuz8c00000004ug000000000gmh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	52373	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:28 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:28 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: fd0e08e6-201e-0085-5f27-2634e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010728Z-17c5cb586f65j4snyp1hqk5z2s00000005tg000000000adg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:28 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	52374	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:28 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:28 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 013f0f94-801e-00ac-2ef3-24fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010728Z-15b8d89586fxdh48qknu9dqk2g000000087000000000a9vu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:28 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	52376	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:28 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:28 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:28 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010728Z-16849878b78p8hrf1se7fucxk8000000054000000000m5bk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:28 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	52375	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:28 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:28 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:28 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010728Z-16849878b787bfsh7zgp804my4000000032g00000000egh3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:28 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	52372	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:29 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:29 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:29 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010729Z-16849878b782d4lwcu6h6gmxnw0000000410000000006qam x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:29 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	52378	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:29 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:29 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 16f4e3a8-701e-0053-1d57-273a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010729Z-17c5cb586f6mkpfk79wxvcahc000000004rg0000000079pd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:29 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	52379	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:29 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:29 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:29 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: cd4a5759-201e-005d-4b3a-26afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010729Z-r197bdfb6b4grkz4xgvkar0zcs00000003vg000000009cp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:29 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	52380	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:29 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:29 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:29 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 41937e91-c01e-008e-5d57-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010729Z-16849878b78j7llf5vkyvvcehs00000005bg00000000g062 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:29 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	52381	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:29 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:29 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:29 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 20ac8722-c01e-00ad-30e6-27a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010729Z-17c5cb586f6mhqqb91r8trf2c8000000057g000000002h3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:29 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	52382	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:30 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:30 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:30 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010730Z-16849878b78hh85qc40uyr8sc800000004qg000000000hr3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:30 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	52384	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:30 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:30 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:30 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: ca4b2a6a-001e-000b-1aff-2615a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010730Z-17c5cb586f6r59nt869u8w8xt800000003c0000000000zu3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:30 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	52383	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:30 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:30 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:30 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: b5ff136b-401e-005b-7aea-269c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010730Z-r197bdfb6b4wmcgqdschtyp7yg000000043g00000000cyyc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:30 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	52386	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:30 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:30 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:30 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: d866d412-001e-0028-1c9c-27c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010730Z-15b8d89586frzkk2umu6w8qnt80000000mrg00000000bnu2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:30 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	52385	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:30 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:30 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:30 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010730Z-16849878b786jv8w2kpaf5zkqs000000037g000000007pcz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:30 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	52387	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:30 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:31 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:31 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a0fb8a5-701e-0050-6930-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010731Z-16849878b78x6gn56mgecg60qc000000062g00000000hb9c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:31 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	52388	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:31 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:31 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:31 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 6795109f-a01e-00ab-085e-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010731Z-r197bdfb6b4grkz4xgvkar0zcs00000003tg00000000dqk5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:31 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	52389	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:31 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:31 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:31 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 6129b0de-c01e-00a1-59fb-247e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010731Z-15b8d89586fzhrwgk23ex2bvhw0000000720000000007prx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:31 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	52390	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:31 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:31 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:31 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 03b10ad0-a01e-001e-676d-2849ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010731Z-17c5cb586f6mhqqb91r8trf2c80000000550000000006b89 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:31 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	52391	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:31 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:31 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:31 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: f21e1abf-101e-00a2-2367-289f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010731Z-15b8d89586ff5l62aha9080wv000000005h000000000a5kh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:31 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	52392	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:31 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:32 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:31 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010731Z-16849878b78wv88bk51myq5vxc00000004k000000000eht8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:32 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	52393	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:31 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:32 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:32 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: d9e5b04b-c01e-0066-80fb-27a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010732Z-r197bdfb6b4bq7nf8mnywhn9e000000005b000000000a6u7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:32 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	52394	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:32 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:32 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:32 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: d0af8e75-601e-0050-7953-272c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010732Z-r197bdfb6b46kdskt78qagqq1c00000004b000000000d71p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:32 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	52395	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:32 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:32 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:32 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010732Z-16849878b78nx5sne3fztmu6xc00000005a0000000008cwh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:32 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	52396	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:32 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:32 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c05ef2b3-701e-005c-2d6a-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010732Z-17c5cb586f626sn8grcgm1gf8000000002wg0000000012vf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	52397	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:32 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:33 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: cb3ec3ab-c01e-0014-40b8-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010733Z-16849878b78q9m8bqvwuva4svc00000002wg000000006tcs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:33 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	52398	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:32 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:33 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:33 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010733Z-16849878b78fssff8btnns3b1400000004ng000000006ff3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:33 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	52401	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:33 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:33 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:33 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010733Z-16849878b786fl7gm2qg4r5y7000000004p0000000004vzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:33 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	52400	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:33 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:33 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010733Z-16849878b78zqkvcwgr6h55x9n00000003u0000000006kwa x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:33 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	52399	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:33 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:33 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:33 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010733Z-16849878b78bcpfn2qf7sm6hsn00000005vg00000000hqxt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:33 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	52402	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:33 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:34 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:33 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08f6a26f-f01e-0071-6b1c-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010733Z-15b8d89586f2hk28h0h6zye26c00000006p000000000eckf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:34 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	52403	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:33 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:34 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:33 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 903d1aff-701e-0050-019c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010733Z-16849878b78qf2gleqhwczd21s00000004d000000000qrzw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:34 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	52404	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:34 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:34 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:34 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 95bc9e61-201e-0051-3bf2-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010734Z-15b8d89586fnsf5zd126eyaetw00000005m0000000001c76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:34 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	52405	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:34 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:34 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:34 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 7bbcb864-c01e-00ad-1f5a-28a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010734Z-17c5cb586f6z6tw6g7cmdv30m800000005e0000000008c7p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:34 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	52406	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:34 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:34 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:34 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 4fde2afa-301e-0099-279b-276683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010734Z-17c5cb586f62blg5ss55p9d6fn00000004r000000000e1bu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:34 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	52407	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:34 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:34 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:34 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010734Z-16849878b7867ttgfbpnfxt44s000000044000000000hyvd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:34 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	52408	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:34 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:34 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: b03ac640-101e-007a-1bc8-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010734Z-17c5cb586f6b6kj91vqtm6kxaw00000002zg000000008t1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	52409	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:34 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:35 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 44c445c3-601e-003e-0f9c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010734Z-15b8d89586fmc8ck21zz2rtg1w00000001gg000000005y5c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	52410	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:34 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:35 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9b0a187b-e01e-0020-61f3-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010735Z-15b8d89586fzhrwgk23ex2bvhw00000006z000000000dtbb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	52411	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:35 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:35 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7b68ac53-d01e-0082-7e67-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010735Z-16849878b78fssff8btnns3b1400000004pg000000004257 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	52412	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:35 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:35 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 19ae2231-801e-007b-0d9c-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010735Z-16849878b7867ttgfbpnfxt44s000000044g00000000em0z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	52413	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:35 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:35 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 68df6217-401e-0029-6d9c-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010735Z-16849878b785dznd7xpawq9gcn00000005sg000000004f24 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	52414	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:35 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:35 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 5383d0ca-b01e-0053-2a56-26cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010735Z-17c5cb586f6z6tw6g7cmdv30m800000005f0000000006hag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	52415	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:35 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:35 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 196ae519-b01e-003e-6310-288e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010735Z-15b8d89586fxdh48qknu9dqk2g000000086g00000000bqfz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	52416	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:36 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:36 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:36 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010736Z-16849878b782d4lwcu6h6gmxnw00000003wg00000000qme4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-28 01:07:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	52418	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:36 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:36 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:36 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010736Z-16849878b78wv88bk51myq5vxc00000004q00000000027a0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:36 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	52417	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:36 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:36 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:36 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b84d3f52-b01e-0084-7ef7-26d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010736Z-r197bdfb6b48pl4k4a912hk2g400000003e000000000aryt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	52419	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:36 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:36 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:36 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010736Z-16849878b78km6fmmkbenhx76n00000003mg00000000g2s5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:36 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	52420	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 01:07:36 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-28 01:07:36 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 01:07:36 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 00d80357-401e-0048-04c7-270409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241028T010736Z-15b8d89586fxdh48qknu9dqk2g000000087000000000aa38 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 01:07:36 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Target ID:	0
Start time:	21:06:18
Start date:	27/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	21:06:22
Start date:	27/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2324,i,13970472326723440885,11097334602539108024,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	21:06:25
Start date:	27/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://outlook.office365.com/owa/Digital2024@mmsgau.onmicrosoft.com/groupsubscription.ashx?realm=mmsgau.onmicrosoft.com&source=WelcomeEmail&sourceversion=V3&action=conversations&subaction=gotogroup"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://outlook.office365.com/owa/Digital2024@mmsgau.onmicrosoft.com/groupsubscriΡtion.ashx?realm=mmsgau.onmicrosoft.com&source=WelcomeEmail&sourceversion=V3&action=conversations&subaction=gotogroup

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Windows Analysis Report
https://outlook.office365.com/owa/Digital2024@mmsgau.onmicrosoft.com/groupsubscriΡtion.ashx?realm=mmsgau.onmicrosoft.com&source=WelcomeEmail&sourceversion=V3&action=conversations&subaction=gotogroup