Edit tour

Windows Analysis Report
https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false

Overview

General Information

Sample URL:	https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false
Analysis ID:	1545469
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains password input but no form action

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1844,i,1726855533111789611,12643351063651355907,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6884 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5316 --field-trial-handle=1844,i,1726855533111789611,12643351063651355907,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5268 --field-trial-handle=1844,i,1726855533111789611,12643351063651355907,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6664 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1074275128&timestamp=1730299903022
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1074275128&timestamp=1730299903022
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1074275128&timestamp=1730299903022
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1074275128&timestamp=1730299903022
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: Iframe src: /_/bscframe

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: No favicon

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dJ-K06n2kxKOl3wejOLzsGZ4IhNBTZ6qGRbjxMpIWGQFjsxlr-QDAW2u8BOSGoN837ZcNSxg&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1947376338%3A1730299897566722&ddm=0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49910 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yAhylLOZ2rE4Wex&MD=peprnk7f HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1074275128&timestamp=1730299903022 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=jskKzOmilUTZ5GYODwPO3Njn1H6eZI0SUUTYLovhsKvCCadHop0VyP-CwEi7tqvY0ObS6fXmQkX1oGFAhb6Yu8fPpEIf1UnAxxvwDKuCJTDe_DmElvtozj4vbtJk2h732Wg3ToKwQaf6dh23K6yV5BSCe83ABX8eZV1e-Dx39W9nOz95Prt8jE3JHSw
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=jskKzOmilUTZ5GYODwPO3Njn1H6eZI0SUUTYLovhsKvCCadHop0VyP-CwEi7tqvY0ObS6fXmQkX1oGFAhb6Yu8fPpEIf1UnAxxvwDKuCJTDe_DmElvtozj4vbtJk2h732Wg3ToKwQaf6dh23K6yV5BSCe83ABX8eZV1e-Dx39W9nOz95Prt8jE3JHSw
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=JWibhpWxGkn00EGuM704BIdzAkBc46PbYA9anPZ4l0nWyrXAkhR9Kxb_cLVJFgecaS6uIcfU2iS3CzYPR4RAlJ3_E2XwjzaqsrztpRIlzqss9xFuLsdARi9iKFQYIEDA0pVZ_cCyTnadmJwPGAl_k6H5PXbBWryxLErVh-DF-0lehcOqo2jGIPgeI5M
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=JWibhpWxGkn00EGuM704BIdzAkBc46PbYA9anPZ4l0nWyrXAkhR9Kxb_cLVJFgecaS6uIcfU2iS3CzYPR4RAlJ3_E2XwjzaqsrztpRIlzqss9xFuLsdARi9iKFQYIEDA0pVZ_cCyTnadmJwPGAl_k6H5PXbBWryxLErVh-DF-0lehcOqo2jGIPgeI5M
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=JWibhpWxGkn00EGuM704BIdzAkBc46PbYA9anPZ4l0nWyrXAkhR9Kxb_cLVJFgecaS6uIcfU2iS3CzYPR4RAlJ3_E2XwjzaqsrztpRIlzqss9xFuLsdARi9iKFQYIEDA0pVZ_cCyTnadmJwPGAl_k6H5PXbBWryxLErVh-DF-0lehcOqo2jGIPgeI5M
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yAhylLOZ2rE4Wex&MD=peprnk7f HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=JWibhpWxGkn00EGuM704BIdzAkBc46PbYA9anPZ4l0nWyrXAkhR9Kxb_cLVJFgecaS6uIcfU2iS3CzYPR4RAlJ3_E2XwjzaqsrztpRIlzqss9xFuLsdARi9iKFQYIEDA0pVZ_cCyTnadmJwPGAl_k6H5PXbBWryxLErVh-DF-0lehcOqo2jGIPgeI5M
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=JWibhpWxGkn00EGuM704BIdzAkBc46PbYA9anPZ4l0nWyrXAkhR9Kxb_cLVJFgecaS6uIcfU2iS3CzYPR4RAlJ3_E2XwjzaqsrztpRIlzqss9xFuLsdARi9iKFQYIEDA0pVZ_cCyTnadmJwPGAl_k6H5PXbBWryxLErVh-DF-0lehcOqo2jGIPgeI5M
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: chromecache_62.2.dr

String found in binary or memory: _.rq(p)+"/familylink/privacy/notice/embedded?langCountry="+_.rq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.rq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.rq(_.Aq(c))+"&hl="+_.rq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.rq(m)+"/chromebook/termsofservice.html?languageCode="+_.rq(d)+"&regionCode="+_.rq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: drive.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 493sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"Content-Type: application/x-www-form-urlencoded;charset=UTF-8sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"X-Goog-AuthUser: 0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://accounts.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=aa4HzfNqmuzxpQdlwBEsKa_qSxYHzN0tu4t92MehAERQG_cW8HcLIA9-A0SSrbaI8BgfsbRHBzwapwfdaEPFFF55OxeDKRhjTEpCPXgpsPv5U6zGQUTMMzpjTCB9VegnoMKUYMqvVG0Oot9RB9AOyHiC2Pxsc8BiJoOAJEyztrgTBJM8pGI

Source: chromecache_62.2.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_62.2.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: chromecache_65.2.dr, chromecache_77.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_87.2.dr, chromecache_62.2.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
Source: chromecache_62.2.dr	String found in binary or memory: https://families.google.com/intl/
Source: chromecache_77.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_77.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_87.2.dr, chromecache_62.2.dr	String found in binary or memory: https://g.co/recover
Source: chromecache_62.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_87.2.dr, chromecache_62.2.dr	String found in binary or memory: https://play.google.com/work/enroll?identifier=
Source: chromecache_87.2.dr, chromecache_62.2.dr	String found in binary or memory: https://play.google/intl/
Source: chromecache_62.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_62.2.dr	String found in binary or memory: https://policies.google.com/privacy/additional
Source: chromecache_87.2.dr, chromecache_62.2.dr	String found in binary or memory: https://policies.google.com/privacy/google-partners
Source: chromecache_87.2.dr, chromecache_62.2.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: chromecache_87.2.dr, chromecache_62.2.dr	String found in binary or memory: https://policies.google.com/technologies/location-data
Source: chromecache_87.2.dr, chromecache_62.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_87.2.dr, chromecache_62.2.dr	String found in binary or memory: https://policies.google.com/terms/location
Source: chromecache_87.2.dr, chromecache_62.2.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_darkmode_1x.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_silent_tap_yes_darkmode.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes_darkmode.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_dark_v2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_v2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_dark_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_darkmode_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_darkmode_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_darkmode_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_darkmode_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_darkmode_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders_2_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity_2_darkmode.svg
Source: chromecache_65.2.dr, chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/who_will_be_using_this_device.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history_2_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_dark_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_v1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_dark_v1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_v1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_dark_v1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_v1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_dark_0.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_dark_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_dark_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_dark_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_dark_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_dark_3.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_dark_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_dark_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_dark_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_dark_1.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_dark_2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_dark_v2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_v2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set_darkmode.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_dark_v2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_v2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_65.2.dr, chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space_dark.png
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2_dark.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess_dark.svg
Source: chromecache_87.2.dr, chromecache_62.2.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_87.2.dr, chromecache_62.2.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_62.2.dr	String found in binary or memory: https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
Source: chromecache_65.2.dr, chromecache_77.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_87.2.dr, chromecache_62.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_62.2.dr	String found in binary or memory: https://www.google.com/intl/
Source: chromecache_77.2.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_77.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_77.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_77.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_77.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_77.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_87.2.dr, chromecache_62.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: chromecache_87.2.dr, chromecache_62.2.dr	String found in binary or memory: https://www.youtube.com/t/terms?chromeless=1&hl=
Source: chromecache_87.2.dr, chromecache_62.2.dr	String found in binary or memory: https://youtube.com/t/terms?gl=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49910 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@22/44@12/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1844,i,1726855533111789611,12643351063651355907,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5316 --field-trial-handle=1844,i,1726855533111789611,12643351063651355907,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5268 --field-trial-handle=1844,i,1726855533111789611,12643351063651355907,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1844,i,1726855533111789611,12643351063651355907,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5316 --field-trial-handle=1844,i,1726855533111789611,12643351063651355907,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5268 --field-trial-handle=1844,i,1726855533111789611,12643351063651355907,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://play.google/intl/	0%	URL Reputation	safe
https://families.google.com/intl/	0%	URL Reputation	safe
https://policies.google.com/technologies/location-data	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://policies.google.com/privacy/google-partners	0%	URL Reputation	safe
https://policies.google.com/terms/service-specific	0%	URL Reputation	safe
https://g.co/recover	0%	URL Reputation	safe
https://policies.google.com/privacy/additional	0%	URL Reputation	safe
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	0%	URL Reputation	safe
https://policies.google.com/technologies/cookies	0%	URL Reputation	safe
https://policies.google.com/terms	0%	URL Reputation	safe
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	0%	URL Reputation	safe
https://support.google.com/accounts?hl=	0%	URL Reputation	safe
https://policies.google.com/terms/location	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://support.google.com/accounts?p=new-si-ui	0%	URL Reputation	safe
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
www3.l.google.com	216.58.206.78	true	false	unknown
play.google.com	142.250.74.206	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
drive.google.com	172.217.18.14	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
accounts.youtube.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	unknown
https://www.google.com/favicon.ico	false	unknown
https://play.google.com/log?hasfast=true&authuser=0&format=json	false	unknown
https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://play.google/intl/	chromecache_87.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://families.google.com/intl/	chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://youtube.com/t/terms?gl=	chromecache_87.2.dr, chromecache_62.2.dr	false		unknown
https://policies.google.com/technologies/location-data	chromecache_87.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/	chromecache_62.2.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_65.2.dr, chromecache_77.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy/google-partners	chromecache_87.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/work/enroll?identifier=	chromecache_87.2.dr, chromecache_62.2.dr	false		unknown
https://policies.google.com/terms/service-specific	chromecache_87.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://g.co/recover	chromecache_87.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy/additional	chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/technologies/cookies	chromecache_87.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms	chromecache_87.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_65.2.dr, chromecache_77.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_87.2.dr, chromecache_62.2.dr	false		unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_62.2.dr	false		unknown
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_87.2.dr, chromecache_62.2.dr	false		unknown
https://support.google.com/accounts?hl=	chromecache_87.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms/location	chromecache_87.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy	chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/accounts?p=new-si-ui	chromecache_87.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	chromecache_87.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.74.206	play.google.com	United States	15169	GOOGLEUS	false
172.217.18.14	drive.google.com	United States	15169	GOOGLEUS	false
216.58.206.78	www3.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.142	unknown	United States	15169	GOOGLEUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7
192.168.2.9
192.168.2.4
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545469
Start date and time:	2024-10-30 15:50:22 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@22/44@12/12

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 74.125.71.84, 216.58.206.46, 34.104.35.123, 199.232.214.172, 184.28.90.27, 192.229.221.95, 13.85.23.206, 172.217.18.3, 142.250.184.227, 216.58.206.35, 142.250.181.234, 216.58.212.170, 172.217.18.10, 142.250.185.170, 142.250.185.106, 142.250.186.42, 142.250.186.170, 142.250.185.138, 142.250.185.202, 142.250.186.106, 142.250.186.138, 142.250.185.234, 142.250.186.74, 172.217.16.202, 142.250.184.202, 216.58.206.42, 64.233.166.84, 13.95.31.18, 142.250.185.195, 142.251.173.84
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, clients2.google.com, ocsp.digicert.com, e16604.g.akamaiedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, www.gstatic.com, prod.fs.microsoft.com.akadns.net, wu-b-net.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	downloaded
Size (bytes):	706343
Entropy (8bit):	5.597584467052693
Encrypted:	false
SSDEEP:	6144:T9QR/xRXXuQTw7I3eK1HNrBS8rsQR7KGZsNr+ByFFp85u7a71TeDjUJwPrRopw3C:Tcp+Qs7k15P54+BIp850a4Jk
MD5:	851F83A9A2382148BB94A4D180E6EE31
SHA1:	637B523B6BF640BB2DD39679F67F510F1A2DB9F1
SHA-256:	6FC6FFE70B15903A29F082304CFA87D7742B183CFD25BA4B01A349F17CBDCD88
SHA-512:	E3AA8BB91BB94AD19C119D9B7B28761F09B240BB1539980DF4A0A4A7CB79081B9842EE4BB1002A0F8CBC54C7BC61E65E49BF520278FA0C35BC39739D258EDC25
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4hKcBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFrxXZQr1J6jgDQC_7Ih2L3Z9kGYg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,XVq9Qb,STuCOe,njlZCf,m9oV,vjKJJ,y5vRwf,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,qPfo0c,cYShmd,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,WpP9Yc,lwddkf,SpsfSb,aC1iue,tUnxGc,aW3pY,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,xBaz7b,eVCnO,LDQI"
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	downloaded
Size (bytes):	5050
Entropy (8bit):	5.330530390622009
Encrypted:	false
SSDEEP:	96:o5lRPTSqt6ab3hfWVB9BGagA4r+PN8wzLmw8MXVh1SE62X01IjCZTlUUvhUw:KLTRtTbxfaP4r+PNNp827013WiD
MD5:	9C1379B14E7D8DE2A5C348530567294C
SHA1:	B0FAC210C06372EE36131A1F0D6D1A5700A1E677
SHA-256:	E040C618411B6C566442FA9AB8F3A6AD5CFB5693AC9AD88B496BCB70D7BB7F26
SHA-512:	7BC8ECF9C5CD2358C791BC35C0478E77C25FBE07DA4F70DF1148AFB2567ED8B05493704E4783B60E0F508E0A0F2254CC8F81336716673ED6A6E45F22AD11D63C
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4hKcBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFrxXZQr1J6jgDQC_7Ih2L3Z9kGYg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.TNa=_.z("wg1P6b",[_.zB,_.Wn,_.eo]);._.k("wg1P6b");.var D7a;D7a=_.zh(["aria-"]);._.jK=function(a){_.Y.call(this,a.Ga);this.Ma=this.Ba=this.aa=this.viewportElement=this.Pa=null;this.Lc=a.Ea.Af;this.cb=a.Ea.focus;this.Hc=a.Ea.Hc;this.ea=this.aj();a=-1*parseInt(_.So(this.aj().el(),"marginTop")\|\|"0",10);var b=parseInt(_.So(this.aj().el(),"marginBottom")\|\|"0",10);this.Ua={top:a,right:0,bottom:b,left:0};a=_.hf(this.getData("isMenuDynamic"),!1);b=_.hf(this.getData("isMenuHoisted"),!1);this.Ha=a?1:b?2:0;this.ka=!1;this.Da=1;this.Ha!==1&&(this.aa=this.Ta("U0exHf").children().Wc(0),_.Ju(this,.E7a(this,this.aa.el())));_.jG(this.xa())&&(a=this.xa().el(),b=this.Fe.bind(this),a.__soy_skip_handler=b)};_.K(_.jK,_.Y);_.jK.Ca=function(){return{Ea:{Af:_.QF,focus:_.BF,Hc:_.Ru}}};_.jK.prototype.Bz=function(a){var b=a.source;this.Pa=b;var c;((c=a.data)==null?0:c.tA)?(a=a.data.tA,this.Da=a==="MOUS

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	3467
Entropy (8bit):	5.5220418074499
Encrypted:	false
SSDEEP:	48:o74vw9VwMdRtDosjw1FeEfXQ4DsFIEKUv807rhmRnVJXWYWIpWb6pVagyNNx8rF6:oUvw9VwMdRtvw1Fe8XtInBRxQJWA7fRw
MD5:	22AAFE864CCCCCCF22F8F144EE5E63F4
SHA1:	49DCE0BB861077CC3FE42B0489662D5B9C8D80D7
SHA-256:	AEEA634E9C434795D834450825E4A9819DE519976DD89BC743073869C0BD9433
SHA-512:	961BAB9A626DFC1B364F9BD41E90578BD2F43D101679B79F6B48A777AC25027AAC94C6CDE8DD1E656A0CA762E5705531639F3989BF5C92A7F6B55F9AF335B612
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4hKcBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFrxXZQr1J6jgDQC_7Ih2L3Z9kGYg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var Jya=function(){var a=_.Le();return _.hk(a,1)},zu=function(a){this.Fa=_.u(a,0,zu.messageId)};_.K(zu,_.w);zu.prototype.Ia=function(){return _.Yj(this,1)};zu.prototype.Va=function(a){return _.sk(this,1,a)};zu.messageId="f.bo";var Au=function(){_.Gm.call(this)};_.K(Au,_.Gm);Au.prototype.Ad=function(){this.xU=!1;Kya(this);_.Gm.prototype.Ad.call(this)};Au.prototype.aa=function(){Lya(this);if(this.WD)return Mya(this),!1;if(!this.FW)return Bu(this),!0;this.dispatchEvent("p");if(!this.vQ)return Bu(this),!0;this.EN?(this.dispatchEvent("r"),Bu(this)):Mya(this);return!1};.var Nya=function(a){var b=new _.rp(a.c6);a.mR!=null&&_.co(b,"authuser",a.mR);return b},Mya=function(a){a.WD=!0;var b=Nya(a),c="rt=r&f_uid="+_.Rk(a.vQ);_.xn(b,(0,_.gg)(a.ea,a),"POST",c)};.Au.prototype.ea=function(a){a=a.target;Lya(this);if(_.An(a)){this.gL=0;if(this.EN)this.WD=!1,this.dispatchEvent("r"

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	dropped
Size (bytes):	752226
Entropy (8bit):	5.792998627696936
Encrypted:	false
SSDEEP:	3072:2vjVHescksEmGTMYswXX5b+qLj/RPkzetF8c5WoSdwvnhPagW7kW73SgTdImXhgV:25/9DQYswXBj/zb8QEOudJMDdQs8ciWH
MD5:	DCDC3C033B9F662B4C289216775DD652
SHA1:	15ABB9B97B08FB255D23800DFB58EB0A54110D4C
SHA-256:	355D1AF37F7911FC5B5791EBECD16ADD15EE4A6140DED4185A62F298448FAE4C
SHA-512:	5680B01961BF4CC7009E936164F0E7D594E72E8CF5CB7F9D1498FD571052756AC2EB80FEF6C38597173D208BD2FC13771F8A46FA145A860F683790FC51DEFE32
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x13c60ec4, 0x2046d86, 0x1a784f88, 0x11406f40, 0x72102, 0x0, 0x4000000, 0x1b, 0x30f, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Qa,Ua,gaa,iaa,mb,qaa,waa,Caa,Kaa,Maa,Paa,Lb,Qaa,Qb,Tb,Ub,Raa,Saa,Vb,Taa,Uaa,Vaa,Zb,$aa,bba,hc,ic,jc,gba,hba,lba,nba,pba,qba,uba,xba,rba,wba,vba,tba,sba,yba,Cba,Gba,Hba,Eba,Ic,Jc,Kba,Mba,Rba,Sba,Tba,Uba,Vba,Wba,Pba,Qba,Yba,hd,aca,bca,dca,fca,eca,hca,ica,jca,kca,nca,oca,pca,qca,rca,u

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	downloaded
Size (bytes):	3131
Entropy (8bit):	5.411206759866473
Encrypted:	false
SSDEEP:	48:o7QNEoXxS9DeZW/5jNQ8jsW98HwLot5N0GApDWLEfiUYj5ViAeFIpofNVCpXtc6b:oBoXkAS5jO2eQk9MaLKDYjji9WtxOw
MD5:	02404FB6DEC63E7E1B4266DD85AB4D2D
SHA1:	A3094B8AC7E57094CA9DB92CCF6C958DC3A79B5B
SHA-256:	24A8424A3A1549C1B64CF7AF25FF8B2A7ACFF65FE09391898787D7DFE7DF63EE
SHA-512:	1DB4F4DBD6AFA9E4C490E3898D28BDC5D5B28B9281E0CD8B3454EC0666ACE1D966AFB89CA9E73F68410E6C36AFCB1AB8C761494A82C8938A11B9C2BD6EBDCD23
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4hKcBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFrxXZQr1J6jgDQC_7Ih2L3Z9kGYg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var KA=function(a){_.X.call(this,a.Ga)};_.K(KA,_.X);KA.Ca=_.X.Ca;KA.prototype.iT=function(a){return _.cf(this,{Ya:{gU:_.Ql}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.yi(function(e){window._wjdc=function(f){d(f);e(DKa(f,b,a))}}):DKa(c,b,a)})};var DKa=function(a,b,c){return(a=a&&a[c])?a:b.Ya.gU.iT(c)};.KA.prototype.aa=function(a,b){var c=_.Ura(b).Gk;if(c.startsWith("$")){var d=_.Fm.get(a);_.Gq[b]&&(d\|\|(d={},_.Fm.set(a,d)),d[c]=_.Gq[b],delete _.Gq[b],_.Hq--);if(d)if(a=d[c])b=_.ff(a);else throw Error("Jb`"+b);else b=null}else b=null;return b};_.Nu(_.Ufa,KA);._.l();._.k("SNUn3");._.CKa=new _.uf(_.Dg);._.l();._.k("RMhBfe");.var EKa=function(a){var b=_.Fq(a);return b?new _.yi(function(c,d){var e=function(){b=_.Fq(a);var f=_.aga(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	dropped
Size (bytes):	5050
Entropy (8bit):	5.330530390622009
Encrypted:	false
SSDEEP:	96:o5lRPTSqt6ab3hfWVB9BGagA4r+PN8wzLmw8MXVh1SE62X01IjCZTlUUvhUw:KLTRtTbxfaP4r+PNNp827013WiD
MD5:	9C1379B14E7D8DE2A5C348530567294C
SHA1:	B0FAC210C06372EE36131A1F0D6D1A5700A1E677
SHA-256:	E040C618411B6C566442FA9AB8F3A6AD5CFB5693AC9AD88B496BCB70D7BB7F26
SHA-512:	7BC8ECF9C5CD2358C791BC35C0478E77C25FBE07DA4F70DF1148AFB2567ED8B05493704E4783B60E0F508E0A0F2254CC8F81336716673ED6A6E45F22AD11D63C
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.TNa=_.z("wg1P6b",[_.zB,_.Wn,_.eo]);._.k("wg1P6b");.var D7a;D7a=_.zh(["aria-"]);._.jK=function(a){_.Y.call(this,a.Ga);this.Ma=this.Ba=this.aa=this.viewportElement=this.Pa=null;this.Lc=a.Ea.Af;this.cb=a.Ea.focus;this.Hc=a.Ea.Hc;this.ea=this.aj();a=-1*parseInt(_.So(this.aj().el(),"marginTop")\|\|"0",10);var b=parseInt(_.So(this.aj().el(),"marginBottom")\|\|"0",10);this.Ua={top:a,right:0,bottom:b,left:0};a=_.hf(this.getData("isMenuDynamic"),!1);b=_.hf(this.getData("isMenuHoisted"),!1);this.Ha=a?1:b?2:0;this.ka=!1;this.Da=1;this.Ha!==1&&(this.aa=this.Ta("U0exHf").children().Wc(0),_.Ju(this,.E7a(this,this.aa.el())));_.jG(this.xa())&&(a=this.xa().el(),b=this.Fe.bind(this),a.__soy_skip_handler=b)};_.K(_.jK,_.Y);_.jK.Ca=function(){return{Ea:{Af:_.QF,focus:_.BF,Hc:_.Ru}}};_.jK.prototype.Bz=function(a){var b=a.source;this.Pa=b;var c;((c=a.data)==null?0:c.tA)?(a=a.data.tA,this.Da=a==="MOUS

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (468)
Category:	downloaded
Size (bytes):	2130
Entropy (8bit):	5.320106218751151
Encrypted:	false
SSDEEP:	48:o7IN/7bL3A8FrJ/ZOBSXuiiPEGmt78SOTdhf63a/rKCLyrw:oMbLjFXO+VGmNUTTXDLOw
MD5:	117CBF76CFBA252455DC160A563F4090
SHA1:	665D28BC6571CAE462834A16946D309631B905AB
SHA-256:	1EBE77A6D2ECF0CE288934D1643ADC3E93B1996148CA1955F6DA74C446E16C40
SHA-512:	16635460A6D20FC0A348570DDA35C8DE3FA9A5AA1E6B8EA627EF64F8FC91458441653B3AB8D70BCE615072C33B5B4E8C226DD7D805FB24F3D3B90C48DB4F89B7
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4hKcBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFrxXZQr1J6jgDQC_7Ih2L3Z9kGYg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.wZ=function(a){_.X.call(this,a.Ga);this.window=a.Ea.window.get();this.xc=a.Ea.xc};_.K(_.wZ,_.X);_.wZ.Ca=function(){return{Ea:{window:_.Qu,xc:_.uF}}};_.wZ.prototype.Hp=function(){};_.wZ.prototype.addEncryptionRecoveryMethod=function(){};_.xZ=function(a){return(a==null?void 0:a.zp)\|\|function(){}};_.yZ=function(a){return(a==null?void 0:a.r4)\|\|function(){}};_.$Sb=function(a){return(a==null?void 0:a.xq)\|\|function(){}};._.aTb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.bTb=function(a){setTimeout(function(){throw a;},0)};_.wZ.prototype.lP=function(){return!0};_.wZ.prototype.aa=function(a,b,c){b=this.xc;var d=b.kJ,e=new _.jF;a=_.iF(e,7,a);d.call(b,305,a,c,void 0)};_.Nu(_.Un,_.wZ);._.wZ.prototype.aa=function(a,b,c){b=b===void 0?"":

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (395)
Category:	downloaded
Size (bytes):	1608
Entropy (8bit):	5.274746330890097
Encrypted:	false
SSDEEP:	48:o75Ne77VN1jSuQwYd7X8yfMxIF4Nz7dj7D8vb0zrw:oUjSu/O7X8TmM4mw
MD5:	BAC2A8D818336644857F66AFEC6545F0
SHA1:	FF21FC653100DE6BFCD7AA3614D5692E034C0FED
SHA-256:	8F81785330D23FF4B9282F16CC10428886B9A339BD4606AA1D1FD2521F43F947
SHA-512:	2850697C72C64020A6DD5ADE88332FAAF74B47515855094247A5D61E4AE5B19EF59167C931F6068C7E41934B751781D9EB3F48B8EA3F33ADFE7070AE3C191767
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4hKcBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFrxXZQr1J6jgDQC_7Ih2L3Z9kGYg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,ZDZcre,A7fCU"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Cg(_.Yla);_.IA=function(a){_.X.call(this,a.Ga);this.aa=a.Ya.cache};_.K(_.IA,_.X);_.IA.Ca=function(){return{Ya:{cache:_.Gt}}};_.IA.prototype.execute=function(a){_.Db(a,function(b){var c;_.ef(b)&&(c=b.jb.kc(b.nb));c&&this.aa.FH(c)},this);return{}};_.Nu(_.dma,_.IA);._.l();._.k("ZDZcre");.var XH=function(a){_.X.call(this,a.Ga);this.Tm=a.Ea.Tm;this.l5=a.Ea.metadata;this.aa=a.Ea.bu};_.K(XH,_.X);XH.Ca=function(){return{Ea:{Tm:_.BH,metadata:_.v0a,bu:_.yH}}};XH.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Db(a,function(c){var d=b.l5.getType(c.Pd())===2?b.Tm.Qb(c):b.Tm.fetch(c);return _.cm(c,_.CH)?d.then(function(e){return _.Id(e)}):d},this)};_.Nu(_.ima,XH);._.l();._.k("K5nYTd");._.u0a=new _.uf(_.ema);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var EH=function(a){_.X.call(this,a.Ga);this.aa=a.Ea.qR};_.K(EH,_.X);EH.Ca=func

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	dropped
Size (bytes):	1459
Entropy (8bit):	5.309070279638537
Encrypted:	false
SSDEEP:	24:kMYD7DObSukYqTZqNJHY/sM/cOxeNm1IxyMj3xu6mszt0hGbfk9EGbdSFrkR+OYM:o7DObzH5RFNlk0nms0hGbM9EGbdSuReM
MD5:	DCCB922E3A6095C342C8048FBC1A57BB
SHA1:	3E5066418A533AE2580976CB5438688C509954B0
SHA-256:	42F52BFBA7DDB9D025D47CB693F2D9557B87B07EC2FE4570B6234E6ABFF2EEE1
SHA-512:	F4CDB2C5FBAE73D2672E9BDEBCB2ED6901FAD90D81324147E0BB124CC55E0A32121D261E0404598DD077E404298D88DC7B25BC956F5884D5904D0FF708201BAF
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.v0a=new _.uf(_.Ym);._.l();._.k("P6sQOc");.var A0a=!!(_.Vh[1]&1);var C0a=function(a,b,c,d,e){this.ea=a;this.Ba=b;this.ka=c;this.Da=d;this.Ha=e;this.aa=0;this.da=B0a(this)},D0a=function(a){var b={};_.Oa(a.zT(),function(e){b[e]=!0});var c=a.sT(),d=a.uT();return new C0a(a.mQ(),c.aa()1E3,a.ZS(),d.aa()1E3,b)},B0a=function(a){return Math.random()Math.min(a.BaMath.pow(a.ka,a.aa),a.Da)},FH=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ha[b]:!0};var GH=function(a){_.X.call(this,a.Ga);this.da=a.Ea.uW;this.ea=a.Ea.metadata;a=a.Ea.pia;this.fetch=a.fetch.bind(a)};_.K(GH,_.X);GH.Ca=function(){return{Ea:{uW:_.y0a,metadata:_.v0a,pia:_.o0a}}};GH.prototype.aa=function(a,b){if(this.ea.getType(a.Pd())!==1)return _.nn(a);var c=this.da.UV;return(c=c?D0a(c):null)&&FH(c)?_.cza(a,E0a(this,a,b,c)):_.nn(a)};.var E0a=function(a,b,c,d){return c.then(function(e){return e},function(e){

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	dropped
Size (bytes):	9211
Entropy (8bit):	5.403144080712633
Encrypted:	false
SSDEEP:	192:O2NBVKgWaMHDQSluvaY3WH9Pq29xqVInHXC5FfedegZ5cGNJgT5qE:OQj9WaMHDQSluzWc2XqKny5FfedYKJgH
MD5:	3BDD0797E3F47D042547F18D71EE34A8
SHA1:	C413AE90057D0B60541A6BA3EC0ABE0DC90EC300
SHA-256:	06756530B44B27DC53E2F6B00C9C397279EF148D13888B2DA2AB3EBB3955A69D
SHA-512:	31E25FFEA428D024D1D59222FD595E50D3EE8D3F3FB8E2C92F3AC0B2AEA7CF18C486987473306F41FA42E950A66B2930B7F738EBCFC30D89B0D0A8E9556EA1D5
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.kOa=_.z("SD8Jgb",[]);._.lX=function(a,b){if(typeof b==="string")a.Mc(b);else if(b instanceof _.Tp&&b.ia&&b.ia===_.C)b=_.$a(b.Bv()),a.empty().append(b);else if(b instanceof _.Va)b=_.$a(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("Xf");};_.mX=function(a){var b=_.Yo(a,"[jsslot]");if(b.size()>0)return b;b=new _.Wo([_.ql("span")]);_.Zo(b,"jsslot","");a.empty().append(b);return b};_.kPb=function(a){return a===null\|\|typeof a==="string"&&_.Wi(a)};._.k("SD8Jgb");._.vX=function(a){_.Y.call(this,a.Ga);this.Xa=a.controller.Xa;this.ld=a.controllers.ld[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.xa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.vX,_.Y);_.vX.Ca=function(){return{controller:{Xa:{jsname:"n7vHCb",ctor:_.Rv},header:{jsname:"tJHJj",ctor:_.Rv},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2859)
Category:	dropped
Size (bytes):	21769
Entropy (8bit):	5.406292813816537
Encrypted:	false
SSDEEP:	384:i0o6vuD5Z8gDU49ImcEGbio7LR8Bob6mZusxTuFjURVyK3e2:i0o6vuBU49ImFiXLCBbmcsxTsjYoK3e2
MD5:	DF035812B5EF1A999475962CFA2778CB
SHA1:	C79D342B8968BBF97024E82276B82CF618DF3132
SHA-256:	E4940A93FFD848ECE6D30955ED8103B0859B495573806D1FA1E030F28B02D313
SHA-512:	41334E9810323C8C6F213FCA36DE8217B9DE2457FE649F114925B7EAC83B41E68E67D954B73C667C6750AF96CC6EC1CE4EA3F0B88A2F566E4E2BEE21E9F555C4
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Uu.prototype.da=_.ca(41,function(){return _.Ij(this,3)});_.Hz=function(a,b){this.key=a;this.defaultValue=!1;this.flagName=b;this.flagNameForDebugging=void 0};_.Hz.prototype.ctor=function(a){return typeof a==="boolean"?a:this.defaultValue};_.Iz=function(){this.ka=!0;var a=_.Nj(_.Ak(_.Ge("TSDtV",window),_.fza),_.Uu,1,_.Hj())[0];if(a){var b={};for(var c=_.n(_.Nj(a,_.gza,2,_.Hj())),d=c.next();!d.done;d=c.next()){var e=d.value;d=_.ek(e,1).toString();switch(_.Kj(e,_.Vu)){case 3:b[d]=_.ck(e,_.Bj(e,_.Vu,3));break;case 2:b[d]=_.ek(e,_.Bj(e,_.Vu,2));break;case 4:b[d]=_.gk(e,_.Bj(e,_.Vu,4));break;case 5:b[d]=_.lk(e,5,_.Vu);break;case 6:b[d]=_.mk(e,_.mf,6,_.Vu);break;case 8:e=_.Mj(e,_.hza,8,_.Vu);switch(_.Kj(e,_.Wu)){case 1:b[d]=_.lk(e,1,_.Wu);.break;default:throw Error("od`"+_.Kj(e,_.Wu));}break;default:throw Error("od`"+_.Kj(e,_.Vu));}}}else b={};this.ea=b;this.token=a?a.da():null};_

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	downloaded
Size (bytes):	33446
Entropy (8bit):	5.393729723477154
Encrypted:	false
SSDEEP:	768:Tg8lYdJkNKZczRnYYCJoaMLRFXaaUTtNbR38yqbVfSTWHUKuJ:TvOYCmFXaaUTH2ygsTUe
MD5:	9CEBD0460ED4EB506F746542E3D7898C
SHA1:	91E6E466D790E02E89148E418176E0778C7DB428
SHA-256:	B4D36FB36DC95AEFAD9E424F63348AD0D2CF7BBD9A6BD3C7C3565B0E45156901
SHA-512:	05EADFCD70CBC6FBCD725670AD4D3F9B89C78CFE0D3A533F8129BE6290B6A43B9B6E85F34833D82309E3785079179DF679ECD8EDF20956B7D4DB182457CD0948
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4hKcBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFrxXZQr1J6jgDQC_7Ih2L3Z9kGYg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Zua=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.rp("//www.google.com/images/cleardot.gif");_.Cp(c)}this.ka=c};_.h=Zua.prototype;_.h.fd=null;_.h.n_=1E4;_.h.vB=!1;_.h.jR=0;_.h.BK=null;_.h.PV=null;_.h.setTimeout=function(a){this.n_=a};_.h.start=function(){if(this.vB)throw Error("hc");this.vB=!0;this.jR=0;$ua(this)};_.h.stop=function(){ava(this);this.vB=!1};.var $ua=function(a){a.jR++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Jm((0,_.gg)(a.XH,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.gg)(a.Yka,a),a.aa.onerror=(0,_.gg)(a.Xka,a),a.aa.onabort=(0,_.gg)(a.Wka,a),a.BK=_.Jm(a.Zka,a.n_,a),a.aa.src=String(a.ka))};_.h=Zua.prototype;_.h.Yka=function(){this.XH(!0)};_.h.Xka=function(){this.XH(!1)};_.h.Wka=function(){this.XH(!1)};_.h.Zka=function(){this.XH(!1)};._.h.XH=function(a){ava(this);a?(this.vB=!1,this.da.call(this.ea,!0)):this.jR<=0?$ua(this):(this.vB=!1,

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	downloaded
Size (bytes):	752226
Entropy (8bit):	5.792998627696936
Encrypted:	false
SSDEEP:	3072:2vjVHescksEmGTMYswXX5b+qLj/RPkzetF8c5WoSdwvnhPagW7kW73SgTdImXhgV:25/9DQYswXBj/zb8QEOudJMDdQs8ciWH
MD5:	DCDC3C033B9F662B4C289216775DD652
SHA1:	15ABB9B97B08FB255D23800DFB58EB0A54110D4C
SHA-256:	355D1AF37F7911FC5B5791EBECD16ADD15EE4A6140DED4185A62F298448FAE4C
SHA-512:	5680B01961BF4CC7009E936164F0E7D594E72E8CF5CB7F9D1498FD571052756AC2EB80FEF6C38597173D208BD2FC13771F8A46FA145A860F683790FC51DEFE32
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/am=xA7Gk2EbgYD4hKcBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlFHqnV7Pex8RrQDkMFj3kvgx66poQ/m=_b,_tp"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x13c60ec4, 0x2046d86, 0x1a784f88, 0x11406f40, 0x72102, 0x0, 0x4000000, 0x1b, 0x30f, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Qa,Ua,gaa,iaa,mb,qaa,waa,Caa,Kaa,Maa,Paa,Lb,Qaa,Qb,Tb,Ub,Raa,Saa,Vb,Taa,Uaa,Vaa,Zb,$aa,bba,hc,ic,jc,gba,hba,lba,nba,pba,qba,uba,xba,rba,wba,vba,tba,sba,yba,Cba,Gba,Hba,Eba,Ic,Jc,Kba,Mba,Rba,Sba,Tba,Uba,Vba,Wba,Pba,Qba,Yba,hd,aca,bca,dca,fca,eca,hca,ica,jca,kca,nca,oca,pca,qca,rca,u

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (681)
Category:	dropped
Size (bytes):	4067
Entropy (8bit):	5.3661172752733135
Encrypted:	false
SSDEEP:	96:GFISRYkTSNcp+/FtEcSbIyANc4xN+t45w:EIuYknGFtErbIyAawo5
MD5:	A0BBD14D1E2A052733A9FCBABA83B5C7
SHA1:	0BEE2FAE3B31E4440EEAE0E0F0F8029EE47293A5
SHA-256:	A8348155DD78060C255B61316483F8C8DD27E787B14E6DDAE4C760819A16AD47
SHA-512:	85F5412F2377C8FAA16FC3EC7A930F92F23A5950E6007957345CB70BCC234E68124480FFEC696777BF855D626836A1E9F3DA33177F6CBA3ACAC7E792F75EEFEF
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Cg(_.sqa);._.k("sOXFj");.var Tu=function(a){_.X.call(this,a.Ga)};_.K(Tu,_.X);Tu.Ca=_.X.Ca;Tu.prototype.aa=function(a){return a()};_.Nu(_.rqa,Tu);._.l();._.k("oGtAuc");._.eza=new _.uf(_.sqa);._.l();._.k("q0xTif");.var $za=function(a){var b=function(d){_.mo(d)&&(_.mo(d).Nc=null,_.ev(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},qv=function(a){_.Mt.call(this,a.Ga);this.Ra=this.dom=null;if(this.Wl()){var b=_.Xm(this.Ch(),[_.cn,_.bn]);b=_.Ai([b[_.cn],b[_.bn]]).then(function(c){this.Ra=c[0];this.dom=c[1]},null,this);_.Ju(this,b)}this.Sa=a.Wm.Qfa};_.K(qv,_.Mt);qv.Ca=function(){return{Wm:{Qfa:function(a){return _.Ze(a)}}}};qv.prototype.eq=function(a){return this.Sa.eq(a)};.qv.prototype.getData=function(a){return this.Sa.getData(a)};qv.prototype.Xo=function(){_.lu(this.d

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	dropped
Size (bytes):	3467
Entropy (8bit):	5.5220418074499
Encrypted:	false
SSDEEP:	48:o74vw9VwMdRtDosjw1FeEfXQ4DsFIEKUv807rhmRnVJXWYWIpWb6pVagyNNx8rF6:oUvw9VwMdRtvw1Fe8XtInBRxQJWA7fRw
MD5:	22AAFE864CCCCCCF22F8F144EE5E63F4
SHA1:	49DCE0BB861077CC3FE42B0489662D5B9C8D80D7
SHA-256:	AEEA634E9C434795D834450825E4A9819DE519976DD89BC743073869C0BD9433
SHA-512:	961BAB9A626DFC1B364F9BD41E90578BD2F43D101679B79F6B48A777AC25027AAC94C6CDE8DD1E656A0CA762E5705531639F3989BF5C92A7F6B55F9AF335B612
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var Jya=function(){var a=_.Le();return _.hk(a,1)},zu=function(a){this.Fa=_.u(a,0,zu.messageId)};_.K(zu,_.w);zu.prototype.Ia=function(){return _.Yj(this,1)};zu.prototype.Va=function(a){return _.sk(this,1,a)};zu.messageId="f.bo";var Au=function(){_.Gm.call(this)};_.K(Au,_.Gm);Au.prototype.Ad=function(){this.xU=!1;Kya(this);_.Gm.prototype.Ad.call(this)};Au.prototype.aa=function(){Lya(this);if(this.WD)return Mya(this),!1;if(!this.FW)return Bu(this),!0;this.dispatchEvent("p");if(!this.vQ)return Bu(this),!0;this.EN?(this.dispatchEvent("r"),Bu(this)):Mya(this);return!1};.var Nya=function(a){var b=new _.rp(a.c6);a.mR!=null&&_.co(b,"authuser",a.mR);return b},Mya=function(a){a.WD=!0;var b=Nya(a),c="rt=r&f_uid="+_.Rk(a.vQ);_.xn(b,(0,_.gg)(a.ea,a),"POST",c)};.Au.prototype.ea=function(a){a=a.target;Lya(this);if(_.An(a)){this.gL=0;if(this.EN)this.WD=!1,this.dispatchEvent("r"

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2859)
Category:	downloaded
Size (bytes):	21769
Entropy (8bit):	5.406292813816537
Encrypted:	false
SSDEEP:	384:i0o6vuD5Z8gDU49ImcEGbio7LR8Bob6mZusxTuFjURVyK3e2:i0o6vuBU49ImFiXLCBbmcsxTsjYoK3e2
MD5:	DF035812B5EF1A999475962CFA2778CB
SHA1:	C79D342B8968BBF97024E82276B82CF618DF3132
SHA-256:	E4940A93FFD848ECE6D30955ED8103B0859B495573806D1FA1E030F28B02D313
SHA-512:	41334E9810323C8C6F213FCA36DE8217B9DE2457FE649F114925B7EAC83B41E68E67D954B73C667C6750AF96CC6EC1CE4EA3F0B88A2F566E4E2BEE21E9F555C4
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4hKcBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFrxXZQr1J6jgDQC_7Ih2L3Z9kGYg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Uu.prototype.da=_.ca(41,function(){return _.Ij(this,3)});_.Hz=function(a,b){this.key=a;this.defaultValue=!1;this.flagName=b;this.flagNameForDebugging=void 0};_.Hz.prototype.ctor=function(a){return typeof a==="boolean"?a:this.defaultValue};_.Iz=function(){this.ka=!0;var a=_.Nj(_.Ak(_.Ge("TSDtV",window),_.fza),_.Uu,1,_.Hj())[0];if(a){var b={};for(var c=_.n(_.Nj(a,_.gza,2,_.Hj())),d=c.next();!d.done;d=c.next()){var e=d.value;d=_.ek(e,1).toString();switch(_.Kj(e,_.Vu)){case 3:b[d]=_.ck(e,_.Bj(e,_.Vu,3));break;case 2:b[d]=_.ek(e,_.Bj(e,_.Vu,2));break;case 4:b[d]=_.gk(e,_.Bj(e,_.Vu,4));break;case 5:b[d]=_.lk(e,5,_.Vu);break;case 6:b[d]=_.mk(e,_.mf,6,_.Vu);break;case 8:e=_.Mj(e,_.hza,8,_.Vu);switch(_.Kj(e,_.Wu)){case 1:b[d]=_.lk(e,1,_.Wu);.break;default:throw Error("od`"+_.Kj(e,_.Wu));}break;default:throw Error("od`"+_.Kj(e,_.Vu));}}}else b={};this.ea=b;this.token=a?a.da():null};_

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.852645816977233
Encrypted:	false
SSDEEP:	3:DZFJu0+WVTBCq2xCKsJJuYHSKnZ:lFJuuVTBpnu4SKZ
MD5:	3D76DE7C583DA8ED6D1D5AB91239F88B
SHA1:	A0818EFD94EFC525EBF513EDE7CADE6D038DF57A
SHA-256:	E9FBC4E9A936269D7CC25B32C7910F3861CA3D3AE84907A34D613442E44A01E1
SHA-512:	0DA8AD357DFCEB655865C834BFAF7EABE3762DB13EF9BE681F2426540E767C8F3779D1E90D9DACB3040363F72A263DA9FA4F61EEA72C21DC07DED17488207504
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto
Preview:	Cj0KBw0ZARP6GgAKKQ3oIX6GGgQISxgCKhwIClIYCg5AIS4kI18qLSY/Ky8lLBABGP////8PCgcN05ioBxoA

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	9211
Entropy (8bit):	5.403144080712633
Encrypted:	false
SSDEEP:	192:O2NBVKgWaMHDQSluvaY3WH9Pq29xqVInHXC5FfedegZ5cGNJgT5qE:OQj9WaMHDQSluzWc2XqKny5FfedYKJgH
MD5:	3BDD0797E3F47D042547F18D71EE34A8
SHA1:	C413AE90057D0B60541A6BA3EC0ABE0DC90EC300
SHA-256:	06756530B44B27DC53E2F6B00C9C397279EF148D13888B2DA2AB3EBB3955A69D
SHA-512:	31E25FFEA428D024D1D59222FD595E50D3EE8D3F3FB8E2C92F3AC0B2AEA7CF18C486987473306F41FA42E950A66B2930B7F738EBCFC30D89B0D0A8E9556EA1D5
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4hKcBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=AvtSve,CMcBD,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,cYShmd,eVCnO,hc6Ubd,inNHtf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,qPfo0c,qmdT9,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFrxXZQr1J6jgDQC_7Ih2L3Z9kGYg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.kOa=_.z("SD8Jgb",[]);._.lX=function(a,b){if(typeof b==="string")a.Mc(b);else if(b instanceof _.Tp&&b.ia&&b.ia===_.C)b=_.$a(b.Bv()),a.empty().append(b);else if(b instanceof _.Va)b=_.$a(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("Xf");};_.mX=function(a){var b=_.Yo(a,"[jsslot]");if(b.size()>0)return b;b=new _.Wo([_.ql("span")]);_.Zo(b,"jsslot","");a.empty().append(b);return b};_.kPb=function(a){return a===null\|\|typeof a==="string"&&_.Wi(a)};._.k("SD8Jgb");._.vX=function(a){_.Y.call(this,a.Ga);this.Xa=a.controller.Xa;this.ld=a.controllers.ld[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.xa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.vX,_.Y);_.vX.Ca=function(){return{controller:{Xa:{jsname:"n7vHCb",ctor:_.Rv},header:{jsname:"tJHJj",ctor:_.Rv},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (468)
Category:	dropped
Size (bytes):	2130
Entropy (8bit):	5.320106218751151
Encrypted:	false
SSDEEP:	48:o7IN/7bL3A8FrJ/ZOBSXuiiPEGmt78SOTdhf63a/rKCLyrw:oMbLjFXO+VGmNUTTXDLOw
MD5:	117CBF76CFBA252455DC160A563F4090
SHA1:	665D28BC6571CAE462834A16946D309631B905AB
SHA-256:	1EBE77A6D2ECF0CE288934D1643ADC3E93B1996148CA1955F6DA74C446E16C40
SHA-512:	16635460A6D20FC0A348570DDA35C8DE3FA9A5AA1E6B8EA627EF64F8FC91458441653B3AB8D70BCE615072C33B5B4E8C226DD7D805FB24F3D3B90C48DB4F89B7
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.wZ=function(a){_.X.call(this,a.Ga);this.window=a.Ea.window.get();this.xc=a.Ea.xc};_.K(_.wZ,_.X);_.wZ.Ca=function(){return{Ea:{window:_.Qu,xc:_.uF}}};_.wZ.prototype.Hp=function(){};_.wZ.prototype.addEncryptionRecoveryMethod=function(){};_.xZ=function(a){return(a==null?void 0:a.zp)\|\|function(){}};_.yZ=function(a){return(a==null?void 0:a.r4)\|\|function(){}};_.$Sb=function(a){return(a==null?void 0:a.xq)\|\|function(){}};._.aTb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.bTb=function(a){setTimeout(function(){throw a;},0)};_.wZ.prototype.lP=function(){return!0};_.wZ.prototype.aa=function(a,b,c){b=this.xc;var d=b.kJ,e=new _.jF;a=_.iF(e,7,a);d.call(b,305,a,c,void 0)};_.Nu(_.Un,_.wZ);._.wZ.prototype.aa=function(a,b,c){b=b===void 0?"":

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (395)
Category:	dropped
Size (bytes):	1608
Entropy (8bit):	5.274746330890097
Encrypted:	false
SSDEEP:	48:o75Ne77VN1jSuQwYd7X8yfMxIF4Nz7dj7D8vb0zrw:oUjSu/O7X8TmM4mw
MD5:	BAC2A8D818336644857F66AFEC6545F0
SHA1:	FF21FC653100DE6BFCD7AA3614D5692E034C0FED
SHA-256:	8F81785330D23FF4B9282F16CC10428886B9A339BD4606AA1D1FD2521F43F947
SHA-512:	2850697C72C64020A6DD5ADE88332FAAF74B47515855094247A5D61E4AE5B19EF59167C931F6068C7E41934B751781D9EB3F48B8EA3F33ADFE7070AE3C191767
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Cg(_.Yla);_.IA=function(a){_.X.call(this,a.Ga);this.aa=a.Ya.cache};_.K(_.IA,_.X);_.IA.Ca=function(){return{Ya:{cache:_.Gt}}};_.IA.prototype.execute=function(a){_.Db(a,function(b){var c;_.ef(b)&&(c=b.jb.kc(b.nb));c&&this.aa.FH(c)},this);return{}};_.Nu(_.dma,_.IA);._.l();._.k("ZDZcre");.var XH=function(a){_.X.call(this,a.Ga);this.Tm=a.Ea.Tm;this.l5=a.Ea.metadata;this.aa=a.Ea.bu};_.K(XH,_.X);XH.Ca=function(){return{Ea:{Tm:_.BH,metadata:_.v0a,bu:_.yH}}};XH.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Db(a,function(c){var d=b.l5.getType(c.Pd())===2?b.Tm.Qb(c):b.Tm.fetch(c);return _.cm(c,_.CH)?d.then(function(e){return _.Id(e)}):d},this)};_.Nu(_.ima,XH);._.l();._.k("K5nYTd");._.u0a=new _.uf(_.ema);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var EH=function(a){_.X.call(this,a.Ga);this.aa=a.Ea.qR};_.K(EH,_.X);EH.Ca=func

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	dropped
Size (bytes):	33446
Entropy (8bit):	5.393729723477154
Encrypted:	false
SSDEEP:	768:Tg8lYdJkNKZczRnYYCJoaMLRFXaaUTtNbR38yqbVfSTWHUKuJ:TvOYCmFXaaUTH2ygsTUe
MD5:	9CEBD0460ED4EB506F746542E3D7898C
SHA1:	91E6E466D790E02E89148E418176E0778C7DB428
SHA-256:	B4D36FB36DC95AEFAD9E424F63348AD0D2CF7BBD9A6BD3C7C3565B0E45156901
SHA-512:	05EADFCD70CBC6FBCD725670AD4D3F9B89C78CFE0D3A533F8129BE6290B6A43B9B6E85F34833D82309E3785079179DF679ECD8EDF20956B7D4DB182457CD0948
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Zua=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.rp("//www.google.com/images/cleardot.gif");_.Cp(c)}this.ka=c};_.h=Zua.prototype;_.h.fd=null;_.h.n_=1E4;_.h.vB=!1;_.h.jR=0;_.h.BK=null;_.h.PV=null;_.h.setTimeout=function(a){this.n_=a};_.h.start=function(){if(this.vB)throw Error("hc");this.vB=!0;this.jR=0;$ua(this)};_.h.stop=function(){ava(this);this.vB=!1};.var $ua=function(a){a.jR++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Jm((0,_.gg)(a.XH,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.gg)(a.Yka,a),a.aa.onerror=(0,_.gg)(a.Xka,a),a.aa.onabort=(0,_.gg)(a.Wka,a),a.BK=_.Jm(a.Zka,a.n_,a),a.aa.src=String(a.ka))};_.h=Zua.prototype;_.h.Yka=function(){this.XH(!0)};_.h.Xka=function(){this.XH(!1)};_.h.Wka=function(){this.XH(!1)};_.h.Zka=function(){this.XH(!1)};._.h.XH=function(a){ava(this);a?(this.vB=!1,this.da.call(this.ea,!0)):this.jR<=0?$ua(this):(this.vB=!1,

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	dropped
Size (bytes):	706343
Entropy (8bit):	5.597584467052693
Encrypted:	false
SSDEEP:	6144:T9QR/xRXXuQTw7I3eK1HNrBS8rsQR7KGZsNr+ByFFp85u7a71TeDjUJwPrRopw3C:Tcp+Qs7k15P54+BIp850a4Jk
MD5:	851F83A9A2382148BB94A4D180E6EE31
SHA1:	637B523B6BF640BB2DD39679F67F510F1A2DB9F1
SHA-256:	6FC6FFE70B15903A29F082304CFA87D7742B183CFD25BA4B01A349F17CBDCD88
SHA-512:	E3AA8BB91BB94AD19C119D9B7B28761F09B240BB1539980DF4A0A4A7CB79081B9842EE4BB1002A0F8CBC54C7BC61E65E49BF520278FA0C35BC39739D258EDC25
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	dropped
Size (bytes):	3131
Entropy (8bit):	5.411206759866473
Encrypted:	false
SSDEEP:	48:o7QNEoXxS9DeZW/5jNQ8jsW98HwLot5N0GApDWLEfiUYj5ViAeFIpofNVCpXtc6b:oBoXkAS5jO2eQk9MaLKDYjji9WtxOw
MD5:	02404FB6DEC63E7E1B4266DD85AB4D2D
SHA1:	A3094B8AC7E57094CA9DB92CCF6C958DC3A79B5B
SHA-256:	24A8424A3A1549C1B64CF7AF25FF8B2A7ACFF65FE09391898787D7DFE7DF63EE
SHA-512:	1DB4F4DBD6AFA9E4C490E3898D28BDC5D5B28B9281E0CD8B3454EC0666ACE1D966AFB89CA9E73F68410E6C36AFCB1AB8C761494A82C8938A11B9C2BD6EBDCD23
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var KA=function(a){_.X.call(this,a.Ga)};_.K(KA,_.X);KA.Ca=_.X.Ca;KA.prototype.iT=function(a){return _.cf(this,{Ya:{gU:_.Ql}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.yi(function(e){window._wjdc=function(f){d(f);e(DKa(f,b,a))}}):DKa(c,b,a)})};var DKa=function(a,b,c){return(a=a&&a[c])?a:b.Ya.gU.iT(c)};.KA.prototype.aa=function(a,b){var c=_.Ura(b).Gk;if(c.startsWith("$")){var d=_.Fm.get(a);_.Gq[b]&&(d\|\|(d={},_.Fm.set(a,d)),d[c]=_.Gq[b],delete _.Gq[b],_.Hq--);if(d)if(a=d[c])b=_.ff(a);else throw Error("Jb`"+b);else b=null}else b=null;return b};_.Nu(_.Ufa,KA);._.l();._.k("SNUn3");._.CKa=new _.uf(_.Dg);._.l();._.k("RMhBfe");.var EKa=function(a){var b=_.Fq(a);return b?new _.yi(function(c,d){var e=function(){b=_.Fq(a);var f=_.aga(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (681)
Category:	downloaded
Size (bytes):	4067
Entropy (8bit):	5.3661172752733135
Encrypted:	false
SSDEEP:	96:GFISRYkTSNcp+/FtEcSbIyANc4xN+t45w:EIuYknGFtErbIyAawo5
MD5:	A0BBD14D1E2A052733A9FCBABA83B5C7
SHA1:	0BEE2FAE3B31E4440EEAE0E0F0F8029EE47293A5
SHA-256:	A8348155DD78060C255B61316483F8C8DD27E787B14E6DDAE4C760819A16AD47
SHA-512:	85F5412F2377C8FAA16FC3EC7A930F92F23A5950E6007957345CB70BCC234E68124480FFEC696777BF855D626836A1E9F3DA33177F6CBA3ACAC7E792F75EEFEF
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4hKcBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFrxXZQr1J6jgDQC_7Ih2L3Z9kGYg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe"
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Cg(_.sqa);._.k("sOXFj");.var Tu=function(a){_.X.call(this,a.Ga)};_.K(Tu,_.X);Tu.Ca=_.X.Ca;Tu.prototype.aa=function(a){return a()};_.Nu(_.rqa,Tu);._.l();._.k("oGtAuc");._.eza=new _.uf(_.sqa);._.l();._.k("q0xTif");.var $za=function(a){var b=function(d){_.mo(d)&&(_.mo(d).Nc=null,_.ev(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},qv=function(a){_.Mt.call(this,a.Ga);this.Ra=this.dom=null;if(this.Wl()){var b=_.Xm(this.Ch(),[_.cn,_.bn]);b=_.Ai([b[_.cn],b[_.bn]]).then(function(c){this.Ra=c[0];this.dom=c[1]},null,this);_.Ju(this,b)}this.Sa=a.Wm.Qfa};_.K(qv,_.Mt);qv.Ca=function(){return{Wm:{Qfa:function(a){return _.Ze(a)}}}};qv.prototype.eq=function(a){return this.Sa.eq(a)};.qv.prototype.getData=function(a){return this.Sa.getData(a)};qv.prototype.Xo=function(){_.lu(this.d

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	downloaded
Size (bytes):	1459
Entropy (8bit):	5.309070279638537
Encrypted:	false
SSDEEP:	24:kMYD7DObSukYqTZqNJHY/sM/cOxeNm1IxyMj3xu6mszt0hGbfk9EGbdSFrkR+OYM:o7DObzH5RFNlk0nms0hGbM9EGbdSuReM
MD5:	DCCB922E3A6095C342C8048FBC1A57BB
SHA1:	3E5066418A533AE2580976CB5438688C509954B0
SHA-256:	42F52BFBA7DDB9D025D47CB693F2D9557B87B07EC2FE4570B6234E6ABFF2EEE1
SHA-512:	F4CDB2C5FBAE73D2672E9BDEBCB2ED6901FAD90D81324147E0BB124CC55E0A32121D261E0404598DD077E404298D88DC7B25BC956F5884D5904D0FF708201BAF
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4hKcBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFrxXZQr1J6jgDQC_7Ih2L3Z9kGYg/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=P6sQOc"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.v0a=new _.uf(_.Ym);._.l();._.k("P6sQOc");.var A0a=!!(_.Vh[1]&1);var C0a=function(a,b,c,d,e){this.ea=a;this.Ba=b;this.ka=c;this.Da=d;this.Ha=e;this.aa=0;this.da=B0a(this)},D0a=function(a){var b={};_.Oa(a.zT(),function(e){b[e]=!0});var c=a.sT(),d=a.uT();return new C0a(a.mQ(),c.aa()1E3,a.ZS(),d.aa()1E3,b)},B0a=function(a){return Math.random()Math.min(a.BaMath.pow(a.ka,a.aa),a.Da)},FH=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ha[b]:!0};var GH=function(a){_.X.call(this,a.Ga);this.da=a.Ea.uW;this.ea=a.Ea.metadata;a=a.Ea.pia;this.fetch=a.fetch.bind(a)};_.K(GH,_.X);GH.Ca=function(){return{Ea:{uW:_.y0a,metadata:_.v0a,pia:_.o0a}}};GH.prototype.aa=function(a,b){if(this.ea.getType(a.Pd())!==1)return _.nn(a);var c=this.da.UV;return(c=c?D0a(c):null)&&FH(c)?_.cza(a,E0a(this,a,b,c)):_.nn(a)};.var E0a=function(a,b,c,d){return c.then(function(e){return e},function(e){

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 15:51:19.299582958 CET	49675	443	192.168.2.4	173.222.162.32
Oct 30, 2024 15:51:31.773475885 CET	49672	443	192.168.2.4	173.222.162.32
Oct 30, 2024 15:51:31.773534060 CET	443	49672	173.222.162.32	192.168.2.4
Oct 30, 2024 15:51:33.355410099 CET	49736	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:33.355484962 CET	443	49736	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:33.355573893 CET	49736	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:33.355881929 CET	49737	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:33.355956078 CET	443	49737	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:33.356091976 CET	49737	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:33.356237888 CET	49736	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:33.356256008 CET	443	49736	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:33.356640100 CET	49737	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:33.356676102 CET	443	49737	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:33.864557028 CET	49739	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:51:33.864617109 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:33.864861965 CET	49739	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:51:33.889280081 CET	49739	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:51:33.889309883 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:33.960167885 CET	49740	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:33.960221052 CET	443	49740	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:33.960378885 CET	49740	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:33.960830927 CET	49740	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:33.960845947 CET	443	49740	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:34.238040924 CET	443	49736	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.270139933 CET	443	49737	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.293026924 CET	49736	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:34.293055058 CET	443	49736	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.293710947 CET	443	49736	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.293739080 CET	443	49736	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.293786049 CET	49736	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:34.294465065 CET	443	49736	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.294517994 CET	49736	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:34.294533014 CET	443	49736	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.320998907 CET	49737	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:34.339112997 CET	49737	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:34.339143038 CET	443	49737	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.339807034 CET	443	49737	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.339822054 CET	443	49737	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.339881897 CET	49737	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:34.340043068 CET	49736	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:34.340204954 CET	443	49736	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.340545893 CET	443	49737	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.340609074 CET	49737	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:34.341039896 CET	49737	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:34.341120958 CET	443	49737	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.342022896 CET	49736	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:34.342039108 CET	443	49736	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.423049927 CET	49737	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:34.423080921 CET	443	49737	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.555350065 CET	443	49736	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.555453062 CET	49736	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:34.614155054 CET	49737	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:34.734755039 CET	443	49736	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.816577911 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:34.816675901 CET	49739	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:51:34.841275930 CET	443	49740	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:34.858087063 CET	443	49736	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:34.858180046 CET	49736	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:34.902235031 CET	49740	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:35.303195953 CET	49739	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:51:35.303260088 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:35.303677082 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:35.323203087 CET	49740	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:35.323271990 CET	443	49740	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:35.324568033 CET	443	49740	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:35.324584961 CET	443	49740	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:35.324651003 CET	49740	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:35.336142063 CET	49740	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:35.336385012 CET	443	49740	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:35.350444078 CET	49736	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:51:35.350493908 CET	443	49736	172.217.18.14	192.168.2.4
Oct 30, 2024 15:51:35.358964920 CET	49739	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:51:35.517657042 CET	49740	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:35.517702103 CET	443	49740	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:35.651837111 CET	49740	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:36.145541906 CET	49739	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:51:36.176013947 CET	49723	80	192.168.2.4	93.184.221.240
Oct 30, 2024 15:51:36.187341928 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:36.196775913 CET	80	49723	93.184.221.240	192.168.2.4
Oct 30, 2024 15:51:36.196832895 CET	49723	80	192.168.2.4	93.184.221.240
Oct 30, 2024 15:51:36.451966047 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:36.452001095 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:36.452008009 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:36.452058077 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:36.452080965 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:36.452079058 CET	49739	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:51:36.452094078 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:36.452135086 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:36.452158928 CET	49739	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:51:36.452158928 CET	49739	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:51:36.452181101 CET	49739	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:51:36.454740047 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:36.454811096 CET	49739	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:51:36.454838991 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:36.461739063 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:36.461812019 CET	49739	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:51:37.090333939 CET	49739	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:51:37.090372086 CET	443	49739	52.149.20.212	192.168.2.4
Oct 30, 2024 15:51:44.239121914 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:44.239214897 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:44.239371061 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:44.239782095 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:44.239813089 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:44.852682114 CET	443	49740	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:44.852765083 CET	443	49740	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:44.852848053 CET	49740	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:45.038285017 CET	49740	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:45.038330078 CET	443	49740	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:45.105427027 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.106050014 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.106077909 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.106610060 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.106678009 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.107343912 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.107405901 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.109046936 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.109152079 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.109358072 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.109368086 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.159281969 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.409537077 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.409591913 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.409637928 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.409641981 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.409662962 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.409674883 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.417918921 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.417973042 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.417984009 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.426717043 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.426767111 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.426793098 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.426876068 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.426920891 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.426929951 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.467519045 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.529251099 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.529308081 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.529320955 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.529351950 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.529397964 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.529402018 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.529412985 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.529470921 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.529730082 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.529773951 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.529777050 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.529786110 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.529828072 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.534322977 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.534373045 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.543051004 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.543102980 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.551604033 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.551656008 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.551662922 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.551685095 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.551724911 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.560259104 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.560313940 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.560339928 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.569159985 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.569210052 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.569217920 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.578399897 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.578478098 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.578490973 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.582820892 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:45.582914114 CET	443	49775	216.58.206.78	192.168.2.4
Oct 30, 2024 15:51:45.582967043 CET	49775	443	192.168.2.4	216.58.206.78
Oct 30, 2024 15:51:46.531369925 CET	49779	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:46.531430006 CET	443	49779	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:46.531550884 CET	49779	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:46.531873941 CET	49780	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:46.531924963 CET	443	49780	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:46.531991005 CET	49780	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:46.532515049 CET	49779	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:46.532540083 CET	443	49779	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:46.534537077 CET	49780	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:46.534550905 CET	443	49780	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.374188900 CET	443	49779	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.387922049 CET	443	49780	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.439904928 CET	49779	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:47.441690922 CET	49780	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:47.512805939 CET	49779	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:47.512814999 CET	443	49779	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.513026953 CET	49780	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:47.513057947 CET	443	49780	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.513356924 CET	443	49779	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.513377905 CET	443	49779	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.513432026 CET	49779	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:47.514111996 CET	443	49779	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.514163971 CET	49779	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:47.514384031 CET	443	49780	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.514394045 CET	443	49780	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.514439106 CET	49780	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:47.515364885 CET	443	49780	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.515417099 CET	49780	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:47.672095060 CET	49779	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:47.672197104 CET	49780	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:47.672286987 CET	443	49779	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.672466040 CET	49779	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:47.672488928 CET	443	49779	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.672564983 CET	443	49780	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.672605991 CET	49780	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:47.719331980 CET	443	49780	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.828327894 CET	49779	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:47.874965906 CET	49780	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:47.874989033 CET	443	49780	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.946279049 CET	443	49779	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.989557981 CET	49779	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:47.989696980 CET	443	49779	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:47.989762068 CET	49779	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.007666111 CET	49787	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.007719994 CET	443	49787	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.007901907 CET	49787	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.009463072 CET	49787	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.009476900 CET	443	49787	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.067513943 CET	443	49780	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.067611933 CET	49780	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.091885090 CET	49780	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.091914892 CET	443	49780	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.094672918 CET	49790	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.094712019 CET	443	49790	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.094784975 CET	49790	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.097069979 CET	49790	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.097084045 CET	443	49790	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.867145061 CET	443	49787	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.867327929 CET	49787	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.867340088 CET	443	49787	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.867743969 CET	443	49787	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.867805004 CET	49787	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.868469954 CET	443	49787	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.868510008 CET	49787	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.868706942 CET	49787	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.868771076 CET	443	49787	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.868841887 CET	49787	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.868875027 CET	49787	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.868884087 CET	443	49787	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.959667921 CET	443	49790	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.960067034 CET	49790	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.960084915 CET	443	49790	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.960958004 CET	443	49790	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.961023092 CET	49790	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.961806059 CET	443	49790	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.961872101 CET	49790	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.962184906 CET	49790	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.962450027 CET	49790	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.962455034 CET	443	49790	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.962486982 CET	443	49790	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:48.962647915 CET	49790	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:48.962655067 CET	443	49790	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:49.031306982 CET	49787	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:49.031352997 CET	49790	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:49.173640013 CET	443	49787	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:49.266141891 CET	443	49790	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:49.286592007 CET	49787	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:49.286619902 CET	443	49787	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:49.287442923 CET	49787	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:49.287545919 CET	443	49787	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:49.287600040 CET	49787	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:49.362915993 CET	49793	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:49.362966061 CET	443	49793	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:49.363039970 CET	49793	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:49.365283966 CET	49793	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:49.365303993 CET	443	49793	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:49.382885933 CET	49795	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:49.382917881 CET	443	49795	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:49.383121967 CET	49795	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:49.383503914 CET	49795	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:49.383516073 CET	443	49795	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:49.387552977 CET	443	49790	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:49.387659073 CET	49790	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:49.388318062 CET	49790	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:49.388338089 CET	443	49790	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:50.224390030 CET	443	49795	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:50.237989902 CET	443	49793	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:50.245332003 CET	49795	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:50.245359898 CET	443	49795	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:50.245852947 CET	49793	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:50.245877028 CET	443	49793	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:50.246051073 CET	443	49795	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:50.246115923 CET	49795	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:50.246243954 CET	443	49793	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:50.246783972 CET	443	49795	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:50.246826887 CET	49795	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:50.248111010 CET	49795	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:50.248188019 CET	443	49795	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:50.249262094 CET	49793	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:50.249340057 CET	443	49793	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:50.249819994 CET	49795	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:50.249835968 CET	443	49795	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:50.250238895 CET	49793	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:50.295339108 CET	443	49793	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:50.329241037 CET	49795	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:50.511642933 CET	443	49793	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:50.511691093 CET	443	49793	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:50.511742115 CET	443	49793	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:50.511779070 CET	443	49793	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:50.511794090 CET	49793	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:50.511842966 CET	443	49793	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:50.511878967 CET	49793	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:50.513906956 CET	49793	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:50.513952017 CET	443	49793	142.250.185.100	192.168.2.4
Oct 30, 2024 15:51:50.514051914 CET	49793	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:51:50.523075104 CET	443	49795	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:50.523123026 CET	443	49795	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:50.523226023 CET	49795	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:50.523252964 CET	443	49795	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:50.525935888 CET	49795	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:50.526017904 CET	443	49795	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:50.526165009 CET	49795	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:50.527230024 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:50.527256966 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:50.527405024 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:50.527746916 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:50.527760029 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:50.532634974 CET	49797	443	192.168.2.4	142.250.186.132
Oct 30, 2024 15:51:50.532674074 CET	443	49797	142.250.186.132	192.168.2.4
Oct 30, 2024 15:51:50.532742977 CET	49797	443	192.168.2.4	142.250.186.132
Oct 30, 2024 15:51:50.533308983 CET	49797	443	192.168.2.4	142.250.186.132
Oct 30, 2024 15:51:50.533320904 CET	443	49797	142.250.186.132	192.168.2.4
Oct 30, 2024 15:51:51.376398087 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:51.376760960 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:51.376795053 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:51.377166033 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:51.377224922 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:51.377866030 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:51.377937078 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:51.378142118 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:51.378201962 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:51.378453016 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:51.378460884 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:51.385490894 CET	443	49797	142.250.186.132	192.168.2.4
Oct 30, 2024 15:51:51.385694981 CET	49797	443	192.168.2.4	142.250.186.132
Oct 30, 2024 15:51:51.385715961 CET	443	49797	142.250.186.132	192.168.2.4
Oct 30, 2024 15:51:51.387027025 CET	443	49797	142.250.186.132	192.168.2.4
Oct 30, 2024 15:51:51.387079954 CET	49797	443	192.168.2.4	142.250.186.132
Oct 30, 2024 15:51:51.387418032 CET	49797	443	192.168.2.4	142.250.186.132
Oct 30, 2024 15:51:51.387531996 CET	49797	443	192.168.2.4	142.250.186.132
Oct 30, 2024 15:51:51.387536049 CET	443	49797	142.250.186.132	192.168.2.4
Oct 30, 2024 15:51:51.387590885 CET	443	49797	142.250.186.132	192.168.2.4
Oct 30, 2024 15:51:51.469991922 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:51.532511950 CET	49797	443	192.168.2.4	142.250.186.132
Oct 30, 2024 15:51:51.532547951 CET	443	49797	142.250.186.132	192.168.2.4
Oct 30, 2024 15:51:51.635966063 CET	443	49797	142.250.186.132	192.168.2.4
Oct 30, 2024 15:51:51.636007071 CET	443	49797	142.250.186.132	192.168.2.4
Oct 30, 2024 15:51:51.636034966 CET	443	49797	142.250.186.132	192.168.2.4
Oct 30, 2024 15:51:51.636034966 CET	49797	443	192.168.2.4	142.250.186.132
Oct 30, 2024 15:51:51.636065006 CET	443	49797	142.250.186.132	192.168.2.4
Oct 30, 2024 15:51:51.636087894 CET	49797	443	192.168.2.4	142.250.186.132
Oct 30, 2024 15:51:51.657445908 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:51.657485008 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:51.657563925 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:51.657584906 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:51.658436060 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:51.658469915 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:51.658544064 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:51.756123066 CET	443	49797	142.250.186.132	192.168.2.4
Oct 30, 2024 15:51:51.756226063 CET	49797	443	192.168.2.4	142.250.186.132
Oct 30, 2024 15:51:51.756630898 CET	49797	443	192.168.2.4	142.250.186.132
Oct 30, 2024 15:51:51.756660938 CET	443	49797	142.250.186.132	192.168.2.4
Oct 30, 2024 15:51:53.000627041 CET	49798	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:53.000677109 CET	443	49798	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:53.000921965 CET	49798	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:53.002410889 CET	49798	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:53.002427101 CET	443	49798	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:53.866455078 CET	443	49798	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:53.866789103 CET	49798	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:53.866803885 CET	443	49798	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:53.867172956 CET	443	49798	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:53.867636919 CET	49798	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:53.867697001 CET	443	49798	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:53.867772102 CET	49798	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:53.867832899 CET	49798	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:53.867839098 CET	443	49798	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:54.152317047 CET	443	49798	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:54.205017090 CET	49798	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:54.205038071 CET	443	49798	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:54.206113100 CET	49798	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:54.206197977 CET	443	49798	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:54.206419945 CET	443	49798	142.250.74.206	192.168.2.4
Oct 30, 2024 15:51:54.206443071 CET	49798	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:54.206532001 CET	49798	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:51:54.211262941 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:54.211308002 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:54.211452007 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:54.211798906 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:54.211817026 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:55.064390898 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:55.064987898 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:55.065010071 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:55.065457106 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:55.065526962 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:55.066278934 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:55.066356897 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:55.066864014 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:55.066939116 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:55.067307949 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:55.067322016 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:55.110510111 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:55.344775915 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:55.344989061 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:55.345055103 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:55.345083952 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:55.345994949 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:51:55.346044064 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 15:51:55.346120119 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:12.322143078 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:12.322181940 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:12.322263002 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:12.322715044 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:12.322731018 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.088558912 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.088680983 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.093100071 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.093111038 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.093374014 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.108995914 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.155333996 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.334731102 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.334758997 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.334781885 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.334871054 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.334887981 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.334901094 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.334938049 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.363740921 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.363770008 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.363828897 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.363843918 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.363883018 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.363899946 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.453350067 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.453375101 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.453463078 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.453483105 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.453516960 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.453615904 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.481959105 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.481976986 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.482086897 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.482100010 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.482199907 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.483827114 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.483844042 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.483984947 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.483992100 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.484070063 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.571701050 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.571728945 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.571825981 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.571825981 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.571844101 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.572026968 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.572750092 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.572766066 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.572851896 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.572859049 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.572953939 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.602315903 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.602335930 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.602425098 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.602436066 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.602514029 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.603689909 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.603705883 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.603805065 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.603811026 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.603940010 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.604878902 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.604892969 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.605007887 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.605012894 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.605072975 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.606498003 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.606514931 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.606586933 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.606594086 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.606662989 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.608793020 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.608814001 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.608908892 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.608908892 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.608916998 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.609091997 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.648782969 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.648802996 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.648885965 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.648896933 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.649198055 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.690462112 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.690538883 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.690550089 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.690598965 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.690679073 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.690679073 CET	49800	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.690690041 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.690704107 CET	443	49800	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.741808891 CET	49801	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.741844893 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.742000103 CET	49801	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.742749929 CET	49802	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.742790937 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.742851973 CET	49802	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.744538069 CET	49803	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.744553089 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.744671106 CET	49803	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.745923042 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.745965004 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.746072054 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.746648073 CET	49805	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.746685028 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.746759892 CET	49805	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.747016907 CET	49805	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.747031927 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.747117043 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.747136116 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.747416019 CET	49801	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.747436047 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.747523069 CET	49802	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.747539997 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.747613907 CET	49803	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:13.747629881 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:13.813581944 CET	49806	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:52:13.813623905 CET	443	49806	52.149.20.212	192.168.2.4
Oct 30, 2024 15:52:13.813757896 CET	49806	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:52:13.814577103 CET	49806	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:52:13.814591885 CET	443	49806	52.149.20.212	192.168.2.4
Oct 30, 2024 15:52:14.506824017 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.507405043 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.507428885 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.507951021 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.507956982 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.510495901 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.510879040 CET	49801	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.510907888 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.511383057 CET	49801	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.511389017 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.519155025 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.519505978 CET	49803	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.519531965 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.519939899 CET	49803	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.519947052 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.535918951 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.536287069 CET	49802	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.536305904 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.536674976 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.536787033 CET	49802	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.536792994 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.537055016 CET	49805	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.537080050 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.537460089 CET	49805	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.537465096 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.869138002 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.869158030 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.869211912 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.869214058 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.869288921 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.869354010 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.869355917 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.869435072 CET	49801	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.869602919 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.869602919 CET	49804	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.869620085 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.869623899 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.869637012 CET	443	49804	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.869636059 CET	49801	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.869648933 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.869658947 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.869669914 CET	49801	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.869676113 CET	443	49801	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.869704962 CET	49803	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.869714022 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.869759083 CET	49803	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.870129108 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.870191097 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.870193958 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.870213985 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.870250940 CET	49805	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.870270967 CET	49802	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.870282888 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.870328903 CET	49802	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.871098995 CET	49803	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.871109009 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.871121883 CET	49803	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.871125937 CET	443	49803	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.871341944 CET	49802	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.871352911 CET	443	49802	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.871423960 CET	49805	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.871448040 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.871462107 CET	49805	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.871470928 CET	443	49805	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.876215935 CET	49807	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.876250982 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.876393080 CET	49807	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.876485109 CET	49808	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.876509905 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.876554966 CET	49809	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.876579046 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.876584053 CET	49808	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.876676083 CET	49809	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.877031088 CET	49809	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.877049923 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.877157927 CET	443	49806	52.149.20.212	192.168.2.4
Oct 30, 2024 15:52:14.877229929 CET	49806	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:52:14.877609968 CET	49810	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.877620935 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.877655029 CET	49807	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.877674103 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.877682924 CET	49810	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.877793074 CET	49810	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.877809048 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.877890110 CET	49808	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.877901077 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.878736019 CET	49811	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.878761053 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.878897905 CET	49811	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.879055977 CET	49811	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:14.879071951 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:14.879486084 CET	49806	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:52:14.879503012 CET	443	49806	52.149.20.212	192.168.2.4
Oct 30, 2024 15:52:14.879873037 CET	443	49806	52.149.20.212	192.168.2.4
Oct 30, 2024 15:52:14.889355898 CET	49806	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:52:14.931339025 CET	443	49806	52.149.20.212	192.168.2.4
Oct 30, 2024 15:52:15.198256969 CET	443	49806	52.149.20.212	192.168.2.4
Oct 30, 2024 15:52:15.198287964 CET	443	49806	52.149.20.212	192.168.2.4
Oct 30, 2024 15:52:15.198324919 CET	443	49806	52.149.20.212	192.168.2.4
Oct 30, 2024 15:52:15.198359013 CET	49806	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:52:15.198405981 CET	443	49806	52.149.20.212	192.168.2.4
Oct 30, 2024 15:52:15.198425055 CET	49806	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:52:15.198456049 CET	49806	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:52:15.199455023 CET	443	49806	52.149.20.212	192.168.2.4
Oct 30, 2024 15:52:15.199496031 CET	443	49806	52.149.20.212	192.168.2.4
Oct 30, 2024 15:52:15.199527979 CET	49806	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:52:15.199536085 CET	443	49806	52.149.20.212	192.168.2.4
Oct 30, 2024 15:52:15.199589014 CET	49806	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:52:15.203104019 CET	49806	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:52:15.203114033 CET	443	49806	52.149.20.212	192.168.2.4
Oct 30, 2024 15:52:15.203161001 CET	49806	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:52:15.203423977 CET	443	49806	52.149.20.212	192.168.2.4
Oct 30, 2024 15:52:15.203465939 CET	443	49806	52.149.20.212	192.168.2.4
Oct 30, 2024 15:52:15.203680992 CET	49806	443	192.168.2.4	52.149.20.212
Oct 30, 2024 15:52:15.615384102 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.615941048 CET	49808	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.615974903 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.616498947 CET	49808	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.616503954 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.623085976 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.623881102 CET	49811	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.623914003 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.624059916 CET	49811	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.624064922 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.627865076 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.627976894 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.628314972 CET	49810	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.628344059 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.628664017 CET	49809	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.628673077 CET	49810	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.628679037 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.628680944 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.628983974 CET	49809	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.628988981 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.631606102 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.632004023 CET	49807	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.632025003 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.632415056 CET	49807	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.632421017 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.749094963 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.749175072 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.752219915 CET	49808	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.752470970 CET	49808	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.752497911 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.752531052 CET	49808	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.752540112 CET	443	49808	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.760360003 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.760519028 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.760711908 CET	49811	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.762763023 CET	49812	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.762798071 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.763122082 CET	49812	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.764941931 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.765017986 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.765327930 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.765404940 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.765458107 CET	49810	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.765671015 CET	49809	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.767252922 CET	49811	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.767252922 CET	49811	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.767271996 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.767281055 CET	443	49811	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.768388033 CET	49809	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.768393040 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.768421888 CET	49809	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.768428087 CET	443	49809	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.768989086 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.769057035 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.769193888 CET	49807	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.769364119 CET	49807	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.769364119 CET	49807	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.769376993 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.769385099 CET	443	49807	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.770797014 CET	49812	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.770809889 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.770940065 CET	49810	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.770940065 CET	49810	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.770958900 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.770970106 CET	443	49810	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.774264097 CET	49813	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.774307013 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.774527073 CET	49814	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.774544954 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.774651051 CET	49814	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.774652958 CET	49813	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.774887085 CET	49813	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.774913073 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.774940014 CET	49814	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.774954081 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.775888920 CET	49815	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.775902987 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.775937080 CET	49816	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.775983095 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.776021004 CET	49815	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.776048899 CET	49816	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.776221991 CET	49815	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.776236057 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:15.776376963 CET	49816	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:15.776391983 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.737776041 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.738868952 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.743691921 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.745605946 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.746758938 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.747926950 CET	49812	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.747947931 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.748673916 CET	49812	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.748680115 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.748927116 CET	49816	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.748955965 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.749533892 CET	49816	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.749547958 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.749950886 CET	49813	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.749967098 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.750451088 CET	49813	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.750458002 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.750488043 CET	49814	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.750504971 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.750936985 CET	49814	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.750941992 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.751241922 CET	49815	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.751252890 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.751801968 CET	49815	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.751808882 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.881911993 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.881994963 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.882051945 CET	49812	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.882252932 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.882352114 CET	49812	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.882374048 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.882384062 CET	49812	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.882390022 CET	443	49812	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.882648945 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.882693052 CET	49814	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.883896112 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.883968115 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.884052992 CET	49813	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.884128094 CET	49814	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.884135962 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.884145975 CET	49814	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.884150028 CET	443	49814	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.885579109 CET	49813	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.885607958 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.885622025 CET	49813	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.885628939 CET	443	49813	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.888820887 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.888895035 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.888943911 CET	49815	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.890856028 CET	49817	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.890906096 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.890974045 CET	49817	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.891401052 CET	49818	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.891455889 CET	443	49818	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.891463041 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.891530991 CET	49818	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.891571045 CET	49815	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.891587019 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.891603947 CET	49815	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.891608953 CET	443	49815	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.891966105 CET	49819	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.891976118 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.892025948 CET	49819	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.892128944 CET	49818	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.892143011 CET	443	49818	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.892374039 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.892417908 CET	49816	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.892452002 CET	49819	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.892465115 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.892483950 CET	49816	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.892483950 CET	49816	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.892498970 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.892508984 CET	443	49816	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.893661976 CET	49817	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.893677950 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.894993067 CET	49820	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.895030975 CET	443	49820	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.895095110 CET	49820	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.895349979 CET	49821	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.895365953 CET	49820	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.895381927 CET	443	49820	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.895387888 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:16.895443916 CET	49821	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.895555973 CET	49821	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:16.895570993 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.201772928 CET	49822	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:17.201823950 CET	443	49822	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:17.201894045 CET	49822	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:17.202269077 CET	49822	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:17.202286005 CET	443	49822	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:17.633258104 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.634298086 CET	49817	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.634345055 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.634973049 CET	49817	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.634987116 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.645123959 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.645760059 CET	49821	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.645802975 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.646534920 CET	49821	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.646542072 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.651583910 CET	443	49818	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.652400970 CET	49818	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.652431011 CET	443	49818	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.653462887 CET	49818	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.653472900 CET	443	49818	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.659749985 CET	443	49820	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.660192966 CET	49820	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.660234928 CET	443	49820	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.661127090 CET	49820	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.661135912 CET	443	49820	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.684518099 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.685211897 CET	49819	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.685250044 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.686059952 CET	49819	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.686068058 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.768048048 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.768116951 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.768181086 CET	49817	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.770167112 CET	49817	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.770191908 CET	443	49817	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.775090933 CET	49823	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.775134087 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.775198936 CET	49823	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.775388002 CET	49823	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.775402069 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.787306070 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.787862062 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.787918091 CET	49821	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.787977934 CET	49821	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.787987947 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.787997007 CET	49821	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.788002014 CET	443	49821	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.789788961 CET	443	49818	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.789854050 CET	443	49818	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.789911985 CET	49818	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.790575981 CET	49818	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.790592909 CET	443	49818	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.790604115 CET	49818	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.790610075 CET	443	49818	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.791661978 CET	49824	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.791707993 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.791816950 CET	49824	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.791980982 CET	49824	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.791995049 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.795486927 CET	49825	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.795520067 CET	443	49825	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.795663118 CET	49825	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.795928955 CET	49825	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.795947075 CET	443	49825	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.797934055 CET	443	49820	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.798113108 CET	443	49820	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.798194885 CET	49820	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.798783064 CET	49820	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.798799992 CET	443	49820	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.802195072 CET	49826	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.802210093 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.804105997 CET	49826	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.804279089 CET	49826	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.804289103 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.829098940 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.829574108 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.829643011 CET	49819	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.829665899 CET	49819	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.829665899 CET	49819	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.829674959 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.829683065 CET	443	49819	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.834275961 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.834311008 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:17.834546089 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.834696054 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:17.834712029 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.013974905 CET	49828	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:18.014031887 CET	443	49828	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.014209032 CET	49828	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:18.014811993 CET	49828	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:18.014831066 CET	443	49828	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.061302900 CET	443	49822	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.061687946 CET	49822	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:18.061721087 CET	443	49822	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.062226057 CET	443	49822	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.062287092 CET	49822	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:18.063230038 CET	443	49822	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.063280106 CET	49822	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:18.063488007 CET	49822	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:18.063569069 CET	443	49822	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.064141989 CET	49822	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:18.064151049 CET	443	49822	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.064237118 CET	49822	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:18.107373953 CET	443	49822	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.578454018 CET	443	49822	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.578627110 CET	443	49822	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.578691959 CET	49822	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:18.579363108 CET	49822	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:18.579381943 CET	443	49822	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.713051081 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.714410067 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.717863083 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.719218016 CET	443	49825	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.719580889 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.720465899 CET	49825	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.720484972 CET	443	49825	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.721421957 CET	49825	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.721430063 CET	443	49825	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.721976995 CET	49823	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.721993923 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.722656965 CET	49823	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.722662926 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.723201990 CET	49826	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.723226070 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.723742008 CET	49826	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.723748922 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.724030972 CET	49824	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.724041939 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.724792957 CET	49824	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.724797964 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.725272894 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.725291014 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.725770950 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.725776911 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.856477022 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.856556892 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.856865883 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.856923103 CET	49823	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.856956959 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.856995106 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.857029915 CET	443	49825	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.857220888 CET	443	49825	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.857261896 CET	49825	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.857743979 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.858541012 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.858602047 CET	49824	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.858637094 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.858725071 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.858764887 CET	49826	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.911215067 CET	443	49828	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.924880028 CET	49823	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.924916983 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.924942970 CET	49823	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.924951077 CET	443	49823	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.927822113 CET	49824	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.927875042 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.927901983 CET	49824	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.927910089 CET	443	49824	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.930613041 CET	49826	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.930620909 CET	443	49826	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.938384056 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.938409090 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.938431978 CET	49827	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.938441038 CET	443	49827	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.951267004 CET	49825	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.951277971 CET	443	49825	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.958708048 CET	49828	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:18.958731890 CET	443	49828	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.960391998 CET	443	49828	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.961047888 CET	49828	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:18.961285114 CET	443	49828	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.961661100 CET	49828	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:18.961781025 CET	49828	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:18.961788893 CET	443	49828	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:18.982908964 CET	49829	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.982949018 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:18.983031988 CET	49829	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.996848106 CET	49829	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:18.996865988 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.061719894 CET	49830	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.061758041 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.061898947 CET	49830	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.069837093 CET	49831	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.069875002 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.070055962 CET	49831	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.070584059 CET	49832	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.070620060 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.070698023 CET	49832	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.071079016 CET	49830	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.071099043 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.117963076 CET	49831	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.118022919 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.118247986 CET	49832	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.118271112 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.180829048 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.180881977 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.181077003 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.183751106 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.183774948 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.262026072 CET	443	49828	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:19.315884113 CET	49828	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:19.315912008 CET	443	49828	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:19.324739933 CET	49828	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:19.324872971 CET	443	49828	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:19.325036049 CET	49828	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:19.348376036 CET	49834	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:19.348417044 CET	443	49834	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:19.348496914 CET	49834	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:19.348923922 CET	49834	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:19.348941088 CET	443	49834	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:19.427037001 CET	49737	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:52:19.427067995 CET	443	49737	172.217.18.14	192.168.2.4
Oct 30, 2024 15:52:19.757253885 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.758052111 CET	49829	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.758070946 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.758702993 CET	49829	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.758708954 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.818972111 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.819659948 CET	49830	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.819678068 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.820378065 CET	49830	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.820384026 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.857907057 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.858586073 CET	49832	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.858628035 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.859395981 CET	49832	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.859401941 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.869864941 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.870419025 CET	49831	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.870436907 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.871192932 CET	49831	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.871198893 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.896152973 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.896243095 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.896327019 CET	49829	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.927864075 CET	49829	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.927864075 CET	49829	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.927890062 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.927901983 CET	443	49829	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.933336973 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.939299107 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.939357996 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.939912081 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.939937115 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.941885948 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.941948891 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.942128897 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.942257881 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.942282915 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.956026077 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.956974983 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.957055092 CET	49830	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.957119942 CET	49830	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.957144976 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.957155943 CET	49830	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.957161903 CET	443	49830	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.959536076 CET	49836	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.959589958 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.959665060 CET	49836	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.959841013 CET	49836	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.959856033 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.993510962 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.993635893 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.993722916 CET	49832	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.993787050 CET	49832	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.993787050 CET	49832	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.993819952 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.993837118 CET	443	49832	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.996123075 CET	49837	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.996180058 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:19.996265888 CET	49837	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.996438980 CET	49837	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:19.996459961 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.005779028 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.006427050 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.006489992 CET	49831	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.006517887 CET	49831	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.006534100 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.006544113 CET	49831	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.006550074 CET	443	49831	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.008989096 CET	49838	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.009030104 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.009094954 CET	49838	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.009219885 CET	49838	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.009238005 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.071208954 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.072500944 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.072628975 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.072750092 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.072777987 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.072789907 CET	49833	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.072797060 CET	443	49833	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.075758934 CET	49839	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.075790882 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.075970888 CET	49839	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.076112986 CET	49839	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.076131105 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.200870991 CET	443	49834	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:20.201143026 CET	49834	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:20.201159000 CET	443	49834	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:20.201680899 CET	443	49834	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:20.201772928 CET	49834	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:20.202686071 CET	443	49834	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:20.202768087 CET	49834	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:20.202939987 CET	49834	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:20.203022003 CET	443	49834	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:20.203448057 CET	49834	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:20.203455925 CET	443	49834	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:20.246743917 CET	49834	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:20.480247974 CET	443	49834	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:20.480308056 CET	443	49834	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:20.480458975 CET	49834	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:20.480484009 CET	443	49834	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:20.481400967 CET	49834	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:20.481451988 CET	443	49834	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:20.481612921 CET	49834	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:20.695664883 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.696211100 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.696254015 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.696724892 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.696732044 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.725836992 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.726314068 CET	49836	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.726339102 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.726835012 CET	49836	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.726840973 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.753881931 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.754393101 CET	49837	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.754414082 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.754873991 CET	49837	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.754880905 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.764902115 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.765296936 CET	49838	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.765312910 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.765678883 CET	49838	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.765683889 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.827630997 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.828166008 CET	49839	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.828191042 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.828639030 CET	49839	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.828645945 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.832853079 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.833429098 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.833488941 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.833522081 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.833544970 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.833555937 CET	49835	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.833561897 CET	443	49835	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.836746931 CET	49840	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.836782932 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.836858988 CET	49840	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.837039948 CET	49840	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.837055922 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.864866018 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.864947081 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.864999056 CET	49836	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.865248919 CET	49836	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.865264893 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.865277052 CET	49836	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.865284920 CET	443	49836	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.868326902 CET	49841	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.868361950 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.868452072 CET	49841	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.868679047 CET	49841	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.868693113 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.891645908 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.892038107 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.892144918 CET	49837	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.892179012 CET	49837	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.892195940 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.892209053 CET	49837	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.892216921 CET	443	49837	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.894920111 CET	49842	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.894964933 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.895073891 CET	49842	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.895230055 CET	49842	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.895241976 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.904362917 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.904903889 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.905004025 CET	49838	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.905031919 CET	49838	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.905046940 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.905056953 CET	49838	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.905061960 CET	443	49838	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.907445908 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.907483101 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.907855988 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.907964945 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.907979012 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.966449976 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.966620922 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.966700077 CET	49839	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.966851950 CET	49839	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.966878891 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.966892958 CET	49839	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.966902018 CET	443	49839	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.970117092 CET	49844	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.970175982 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:20.970345020 CET	49844	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.970676899 CET	49844	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:20.970705986 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.599178076 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.599744081 CET	49840	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.599806070 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.600730896 CET	49840	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.600739002 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.629272938 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.629836082 CET	49841	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.629854918 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.630333900 CET	49841	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.630337954 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.638984919 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.639472008 CET	49842	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.639519930 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.639934063 CET	49842	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.639940023 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.650206089 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.650619030 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.650636911 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.651036978 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.651041985 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.731017113 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.731558084 CET	49844	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.731578112 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.732100964 CET	49844	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.732106924 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.739263058 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.739352942 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.739479065 CET	49840	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.739630938 CET	49840	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.739660025 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.739676952 CET	49840	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.739685059 CET	443	49840	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.742687941 CET	49845	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.742734909 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.742809057 CET	49845	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.743017912 CET	49845	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.743025064 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.776024103 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.776127100 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.776187897 CET	49841	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.776427984 CET	49841	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.776451111 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.776463032 CET	49841	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.776468992 CET	443	49841	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.777118921 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.777192116 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.777429104 CET	49842	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.777548075 CET	49842	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.777571917 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.777584076 CET	49842	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.777590990 CET	443	49842	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.779442072 CET	49846	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.779474974 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.779556036 CET	49846	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.779619932 CET	49847	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.779642105 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.779697895 CET	49847	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.779834032 CET	49847	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.779846907 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.779897928 CET	49846	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.779911995 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.785845041 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.786180973 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.786299944 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.786299944 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.786299944 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.788316011 CET	49848	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.788352966 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.788465023 CET	49848	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.788625956 CET	49848	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.788641930 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.869200945 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.869635105 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.869707108 CET	49844	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.869765997 CET	49844	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.869788885 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.869802952 CET	49844	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.869808912 CET	443	49844	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.872817993 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.872855902 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:21.872916937 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.873073101 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:21.873086929 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.095710993 CET	49843	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.095731974 CET	443	49843	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.624845028 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.625370026 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.625394106 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.625968933 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.625977039 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.627522945 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.628428936 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.629218102 CET	49846	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.629245996 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.629894018 CET	49846	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.629899025 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.630290985 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.630848885 CET	49848	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.630871058 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.631005049 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.631623983 CET	49848	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.631637096 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.636822939 CET	49847	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.636883974 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.637341976 CET	49847	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.637351036 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.637594938 CET	49845	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.637609959 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.638304949 CET	49845	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.638313055 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.761512995 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.761857033 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.761917114 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.761976004 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.761991978 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.762003899 CET	49849	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.762008905 CET	443	49849	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.764333010 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.764400959 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.764642000 CET	49846	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.764789104 CET	49846	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.764800072 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.764810085 CET	49846	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.764817953 CET	443	49846	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.765376091 CET	49850	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.765403986 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.765583992 CET	49850	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.765805960 CET	49850	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.765824080 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.766912937 CET	49851	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.766942024 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.767003059 CET	49851	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.767211914 CET	49851	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.767225981 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.769375086 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.769624949 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.769687891 CET	49847	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.769758940 CET	49847	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.769758940 CET	49847	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.769787073 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.769817114 CET	443	49847	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.770169973 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.770575047 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.770662069 CET	49848	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.770687103 CET	49848	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.770687103 CET	49848	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.770703077 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.770714998 CET	443	49848	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.772105932 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.772124052 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.772233009 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.772423983 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.772433996 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.772443056 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.772514105 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.772566080 CET	49845	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.772710085 CET	49845	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.772720098 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.772737026 CET	49845	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.772743940 CET	443	49845	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.772744894 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.772768021 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.772881031 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.772974968 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.772988081 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.774831057 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.774846077 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:22.774974108 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.775044918 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:22.775058985 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.382412910 CET	49724	80	192.168.2.4	93.184.221.240
Oct 30, 2024 15:52:23.388721943 CET	80	49724	93.184.221.240	192.168.2.4
Oct 30, 2024 15:52:23.388780117 CET	49724	80	192.168.2.4	93.184.221.240
Oct 30, 2024 15:52:23.515526056 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.516104937 CET	49850	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.516128063 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.516393900 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.516633034 CET	49850	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.516639948 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.516877890 CET	49851	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.516913891 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.517443895 CET	49851	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.517450094 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.519335985 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.519678116 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.519690990 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.520078897 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.520088911 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.533915997 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.534372091 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.534389973 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.534785986 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.534791946 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.571988106 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.572607994 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.572628021 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.573096991 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.573105097 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.653110027 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.653358936 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.653480053 CET	49850	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.653480053 CET	49850	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.653507948 CET	49850	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.653527975 CET	443	49850	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.653742075 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.653934956 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.653985977 CET	49851	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.654205084 CET	49851	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.654222965 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.654248953 CET	49851	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.654256105 CET	443	49851	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.656658888 CET	49855	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.656691074 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.656831026 CET	49855	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.657154083 CET	49856	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.657162905 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.657176018 CET	49855	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.657187939 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.657291889 CET	49856	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.657469034 CET	49856	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.657480001 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.659353018 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.659440041 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.659586906 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.659667015 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.659678936 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.659755945 CET	49854	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.659761906 CET	443	49854	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.661845922 CET	49857	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.661870003 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.661932945 CET	49857	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.662092924 CET	49857	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.662102938 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.674909115 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.675234079 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.675322056 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.675442934 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.675456047 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.675513983 CET	49852	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.675520897 CET	443	49852	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.678210974 CET	49858	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.678261042 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.678543091 CET	49858	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.678950071 CET	49858	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.678962946 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.716938019 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.717545986 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.717637062 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.717684984 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.717709064 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.717720985 CET	49853	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.717725992 CET	443	49853	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.721252918 CET	49859	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.721292973 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:23.721393108 CET	49859	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.721549034 CET	49859	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:23.721559048 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.412072897 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.412678003 CET	49855	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.412717104 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.413208008 CET	49855	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.413233995 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.415462971 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.415992975 CET	49856	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.416023016 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.416399002 CET	49856	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.416409969 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.419647932 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.420010090 CET	49857	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.420022011 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.420523882 CET	49857	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.420528889 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.447513103 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.448012114 CET	49858	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.448043108 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.448481083 CET	49858	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.448487043 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.475126028 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.475703001 CET	49859	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.475716114 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.476100922 CET	49859	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.476104975 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.553879023 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.554032087 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.554306984 CET	49856	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.554348946 CET	49856	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.554348946 CET	49856	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.554363012 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.554373980 CET	443	49856	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.556173086 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.556515932 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.556624889 CET	49855	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.556663990 CET	49855	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.556668997 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.556759119 CET	49855	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.556763887 CET	443	49855	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.557312965 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.557405949 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.557490110 CET	49857	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.558187008 CET	49857	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.558187008 CET	49857	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.558201075 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.558209896 CET	443	49857	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.558597088 CET	49860	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.558618069 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.558715105 CET	49860	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.559284925 CET	49860	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.559298038 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.560338974 CET	49861	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.560360909 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.560678959 CET	49861	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.560816050 CET	49861	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.560827971 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.561125040 CET	49862	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.561167002 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.561244011 CET	49862	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.561425924 CET	49862	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.561443090 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.591778040 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.592103958 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.592196941 CET	49858	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.592246056 CET	49858	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.592246056 CET	49858	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.592272997 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.592283964 CET	443	49858	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.595103025 CET	49863	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.595115900 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.595191956 CET	49863	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.595376968 CET	49863	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.595392942 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.618767977 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.618868113 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.618983030 CET	49859	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.619138002 CET	49859	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.619138002 CET	49859	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.619149923 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.619158983 CET	443	49859	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.622082949 CET	49864	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.622117043 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:24.622248888 CET	49864	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.622440100 CET	49864	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:24.622453928 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.336724043 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.337140083 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.337282896 CET	49860	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.337299109 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.337491989 CET	49861	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.337511063 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.337846994 CET	49860	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.337852955 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.338243961 CET	49861	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.338249922 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.338572979 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.338906050 CET	49862	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.338921070 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.339333057 CET	49862	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.339338064 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.363162041 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.368665934 CET	49863	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.368690968 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.369189024 CET	49863	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.369194031 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.381592989 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.382061005 CET	49864	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.382102013 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.382536888 CET	49864	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.382543087 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.476197958 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.476274967 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.476356030 CET	49861	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.476556063 CET	49861	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.476564884 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.476573944 CET	49861	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.476578951 CET	443	49861	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.477440119 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.477513075 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.477607965 CET	49860	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.477746964 CET	49860	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.477746964 CET	49860	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.477756977 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.477766037 CET	443	49860	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.478127956 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.478188992 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.478239059 CET	49862	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.478552103 CET	49862	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.478557110 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.478565931 CET	49862	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.478569984 CET	443	49862	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.480385065 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.480417013 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.480501890 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.481334925 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.481349945 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.481575966 CET	49866	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.481602907 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.481796980 CET	49866	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.481946945 CET	49866	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.481961012 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.482227087 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.482239008 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.482299089 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.482430935 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.482444048 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.504523993 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.504869938 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.504934072 CET	49863	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.504968882 CET	49863	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.504981041 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.505017996 CET	49863	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.505023956 CET	443	49863	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.507658958 CET	49868	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.507694006 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.507884026 CET	49868	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.508052111 CET	49868	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.508064032 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.522516966 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.522798061 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.522856951 CET	49864	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.522905111 CET	49864	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.522922993 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.522933006 CET	49864	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.522938013 CET	443	49864	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.525696039 CET	49869	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.525732994 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:25.525800943 CET	49869	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.526032925 CET	49869	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:25.526043892 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.229410887 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.230026007 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.230046034 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.230540037 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.230545044 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.232247114 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.232712030 CET	49866	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.232748032 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.233115911 CET	49866	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.233124971 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.241683960 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.242077112 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.242093086 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.242489100 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.242494106 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.273483038 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.274383068 CET	49869	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.274406910 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.274890900 CET	49869	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.274899960 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.364882946 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.364952087 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.365024090 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.365328074 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.365328074 CET	49865	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.365339041 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.365344048 CET	443	49865	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.369384050 CET	49870	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.369420052 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.369667053 CET	49870	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.369856119 CET	49870	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.369869947 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.371056080 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.371609926 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.371670961 CET	49866	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.371781111 CET	49866	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.371809959 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.371828079 CET	49866	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.371834040 CET	443	49866	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.375257969 CET	49871	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.375289917 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.375359058 CET	49871	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.375525951 CET	49871	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.375540018 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.388993979 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.389092922 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.389214993 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.389348984 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.389348984 CET	49867	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.389359951 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.389369965 CET	443	49867	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.392198086 CET	49872	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.392224073 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.392620087 CET	49872	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.396270990 CET	49872	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.396286011 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.408926964 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.409125090 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.409178019 CET	49869	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.409435034 CET	49869	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.409435034 CET	49869	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.409446955 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.409457922 CET	443	49869	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.437726021 CET	49873	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.437768936 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.438146114 CET	49873	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.438986063 CET	49873	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.438999891 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.473479033 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.520807981 CET	49868	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.654432058 CET	49868	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.654447079 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.670141935 CET	49868	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.670150042 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.801749945 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.801978111 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.802100897 CET	49868	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.802460909 CET	49868	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.802476883 CET	443	49868	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.806042910 CET	49874	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.806078911 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:26.806194067 CET	49874	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.806387901 CET	49874	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:26.806402922 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.133332014 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.133430004 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.133991003 CET	49871	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.134017944 CET	49870	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.134023905 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.134033918 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.134510040 CET	49871	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.134519100 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.134572983 CET	49870	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.134584904 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.160151958 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.162077904 CET	49872	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.162101030 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.162863970 CET	49872	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.162869930 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.205037117 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.205662012 CET	49873	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.205708981 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.206147909 CET	49873	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.206165075 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.270854950 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.270868063 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.270922899 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.271044016 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.271060944 CET	49870	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.271095991 CET	49871	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.271605968 CET	49871	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.271622896 CET	49870	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.271630049 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.271635056 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.271646976 CET	49870	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.271650076 CET	49871	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.271652937 CET	443	49870	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.271657944 CET	443	49871	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.274899006 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.274944067 CET	49876	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.274969101 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.274988890 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.275091887 CET	49876	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.275094986 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.275280952 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.275306940 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.275319099 CET	49876	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.275332928 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.301249027 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.301697016 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.301784039 CET	49872	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.301815987 CET	49872	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.301834106 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.301846981 CET	49872	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.301855087 CET	443	49872	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.304569960 CET	49877	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.304609060 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.304682016 CET	49877	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.304825068 CET	49877	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.304836988 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.343493938 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.343564034 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.343636036 CET	49873	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.343777895 CET	49873	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.343803883 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.343818903 CET	49873	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.343827963 CET	443	49873	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.347333908 CET	49878	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.347378969 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.347449064 CET	49878	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.347635031 CET	49878	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.347647905 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.555332899 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.555913925 CET	49874	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.555936098 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.556433916 CET	49874	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.556440115 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.691459894 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.691662073 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.691761971 CET	49874	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.691795111 CET	49874	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.691806078 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.691828012 CET	49874	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.691834927 CET	443	49874	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.695146084 CET	49879	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.695205927 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:27.695276022 CET	49879	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.695544004 CET	49879	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:27.695558071 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.027920008 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.028677940 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.028701067 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.029169083 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.029175043 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.053745985 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.054270983 CET	49877	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.054316998 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.054722071 CET	49877	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.054742098 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.060653925 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.061038971 CET	49876	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.061075926 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.061475039 CET	49876	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.061480999 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.143506050 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.144153118 CET	49878	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.144177914 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.144649982 CET	49878	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.144654989 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.164170980 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.164293051 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.164383888 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.164493084 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.164506912 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.164525986 CET	49875	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.164530993 CET	443	49875	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.167896032 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.167917967 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.168055058 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.168262959 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.168272018 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.201378107 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.201448917 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.201560974 CET	49877	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.201745987 CET	49877	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.201775074 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.201786041 CET	49877	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.201795101 CET	443	49877	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.202775002 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.202943087 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.203007936 CET	49876	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.203053951 CET	49876	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.203068018 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.203078032 CET	49876	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.203083038 CET	443	49876	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.205750942 CET	49881	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.205780029 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.205873966 CET	49882	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.205898046 CET	49881	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.205910921 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.205977917 CET	49882	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.206161976 CET	49881	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.206173897 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.206235886 CET	49882	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.206248999 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.458940983 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.459541082 CET	49879	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.459572077 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.460031033 CET	49879	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.460036993 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.511419058 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.511493921 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.511715889 CET	49878	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.511749983 CET	49878	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.511766911 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.511780977 CET	49878	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.511795998 CET	443	49878	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.515038967 CET	49883	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.515077114 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.515135050 CET	49883	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.515328884 CET	49883	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.515336990 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.594309092 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.595577955 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.595647097 CET	49879	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.595700979 CET	49879	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.595717907 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.595731974 CET	49879	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.595737934 CET	443	49879	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.599111080 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.599158049 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.599318027 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.599416971 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.599432945 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.932410002 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.939667940 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.939687967 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.940402031 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.940407038 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.959445953 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.960082054 CET	49881	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.960102081 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.960880995 CET	49881	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.960886955 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.975153923 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.976752043 CET	49882	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.976768017 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:28.977550030 CET	49882	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:28.977555037 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.072231054 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.072268963 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.072406054 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.072416067 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.072441101 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.072489977 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.084275007 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.084295034 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.084305048 CET	49880	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.084311008 CET	443	49880	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.097299099 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.097364902 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.097495079 CET	49881	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.116058111 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.116147995 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.116283894 CET	49882	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.152174950 CET	49881	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.152174950 CET	49881	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.152198076 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.152208090 CET	443	49881	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.176920891 CET	49882	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.176943064 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.177143097 CET	49882	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.177149057 CET	443	49882	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.273066044 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.281985998 CET	49883	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.281997919 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.297540903 CET	49883	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.297550917 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.305861950 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.305907011 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.305984020 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.307116985 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.307133913 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.311661005 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.311680079 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.311907053 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.313560963 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.313575029 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.325423956 CET	49888	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.325458050 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.325521946 CET	49888	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.325764894 CET	49888	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.325782061 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.351793051 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.364939928 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.364959002 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.366137981 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.366144896 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.431873083 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.431891918 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.431957006 CET	49883	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.431965113 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.432029009 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.432082891 CET	49883	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.499110937 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.499149084 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.499217987 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.499232054 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.499274015 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.499373913 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.499435902 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.499484062 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.513104916 CET	49883	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.513125896 CET	443	49883	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.528842926 CET	49884	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.528868914 CET	443	49884	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.621584892 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.621609926 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.621690989 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.622203112 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.622214079 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.624929905 CET	49890	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.624963045 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:29.625184059 CET	49890	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.625300884 CET	49890	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:29.625314951 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.064800978 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.065951109 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.065978050 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.066798925 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.066807032 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.081537962 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.082724094 CET	49888	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.082751989 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.083431005 CET	49888	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.083437920 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.092793941 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.093527079 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.093565941 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.094822884 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.094834089 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.205380917 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.205456018 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.205631971 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.205725908 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.205770969 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.205787897 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.205801010 CET	49887	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.205806971 CET	443	49887	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.208962917 CET	49891	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.209002018 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.209167957 CET	49891	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.209392071 CET	49891	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.209405899 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.220928907 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.221036911 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.221110106 CET	49888	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.221174002 CET	49888	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.221194029 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.221204042 CET	49888	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.221210003 CET	443	49888	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.223565102 CET	49892	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.223629951 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.223701000 CET	49892	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.223824024 CET	49892	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.223839998 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.236469984 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.236495018 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.236555099 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.236571074 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.236867905 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.236867905 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.236887932 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.237035036 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.237067938 CET	443	49886	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.237123966 CET	49886	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.239034891 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.239080906 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.239150047 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.239288092 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.239301920 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.385570049 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.386173964 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.386204004 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.386667967 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.386673927 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.494992971 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.495542049 CET	49890	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.495584965 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.496063948 CET	49890	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.496072054 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.525763988 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.525866985 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.525928020 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.526169062 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.526191950 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.526205063 CET	49889	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.526212931 CET	443	49889	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.529468060 CET	49894	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.529500961 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.529618025 CET	49894	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.529793978 CET	49894	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.529807091 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.636706114 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.637341022 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.637408972 CET	49890	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.637466908 CET	49890	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.637490034 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.637510061 CET	49890	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.637517929 CET	443	49890	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.640544891 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.640567064 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.640661001 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.640820980 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.640832901 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.966420889 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.967822075 CET	49891	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.967842102 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.968880892 CET	49891	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.968885899 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.985532045 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.987768888 CET	49892	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.987801075 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.989067078 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.989656925 CET	49892	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.989665031 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.990557909 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.990576982 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:30.991276026 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:30.991281033 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.104737043 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.104827881 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.104962111 CET	49891	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.105573893 CET	49891	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.105590105 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.105601072 CET	49891	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.105607986 CET	443	49891	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.124433041 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.124562979 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.125067949 CET	49892	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.128027916 CET	49896	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.128055096 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.128195047 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.128243923 CET	49896	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.128256083 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.128372908 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.128468990 CET	49892	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.128489017 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.128536940 CET	49892	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.128546953 CET	443	49892	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.132953882 CET	49896	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.132966995 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.133116007 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.133131027 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.133140087 CET	49893	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.133146048 CET	443	49893	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.138784885 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.138838053 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.138910055 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.139158010 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.139178991 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.141731977 CET	49898	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.141746044 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.141832113 CET	49898	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.142368078 CET	49898	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.142380953 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.283181906 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.286254883 CET	49894	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.286288023 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.287235975 CET	49894	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.287242889 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.412259102 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.420686960 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.420762062 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.420954943 CET	49894	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.460243940 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.625272036 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.625286102 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.626091957 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.626096964 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.626533985 CET	49894	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.626549959 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.626610994 CET	49894	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.626616001 CET	443	49894	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.670511961 CET	49899	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.670551062 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.670641899 CET	49899	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.687769890 CET	49899	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.687789917 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.763096094 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.763181925 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.763283968 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.796423912 CET	49895	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.796448946 CET	443	49895	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.804929972 CET	49900	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.804972887 CET	443	49900	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.805073023 CET	49900	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.805470943 CET	49900	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.805497885 CET	443	49900	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.889481068 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.891139030 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.891156912 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.893227100 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.893234015 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.893780947 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.894661903 CET	49898	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.894685030 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.895335913 CET	49898	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.895348072 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.907049894 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.907620907 CET	49896	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.907641888 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:31.908827066 CET	49896	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:31.908835888 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.026845932 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.026953936 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.026997089 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.027003050 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.027065039 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.031618118 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.031689882 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.031733036 CET	49898	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.049268961 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.049345016 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.049416065 CET	49896	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.064888000 CET	49898	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.064905882 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.065010071 CET	49898	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.065020084 CET	443	49898	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.066670895 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.066670895 CET	49897	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.066694021 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.066704988 CET	443	49897	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.077460051 CET	49896	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.077476025 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.077513933 CET	49896	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.077518940 CET	443	49896	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.096673012 CET	49901	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.096712112 CET	443	49901	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.096983910 CET	49901	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.099476099 CET	49902	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.099504948 CET	443	49902	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.099574089 CET	49902	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.101748943 CET	49901	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.101764917 CET	443	49901	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.101929903 CET	49902	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.101944923 CET	443	49902	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.105770111 CET	49903	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.105784893 CET	443	49903	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.106030941 CET	49903	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.106173992 CET	49903	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.106179953 CET	443	49903	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.468923092 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.469495058 CET	49899	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.469512939 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.470005035 CET	49899	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.470010042 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.559833050 CET	443	49900	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.560656071 CET	49900	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.560669899 CET	443	49900	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.561568022 CET	49900	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.561573982 CET	443	49900	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.610577106 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.610642910 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.610698938 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.610830069 CET	49899	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.647984982 CET	49899	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.648020029 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.648032904 CET	49899	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.648047924 CET	443	49899	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.652225971 CET	49904	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.652259111 CET	443	49904	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.652527094 CET	49904	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.652741909 CET	49904	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.652754068 CET	443	49904	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.696485043 CET	443	49900	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.696572065 CET	443	49900	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.696636915 CET	49900	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.696901083 CET	49900	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.696919918 CET	443	49900	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.696963072 CET	49900	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.696981907 CET	443	49900	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.703141928 CET	49905	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.703180075 CET	443	49905	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.703324080 CET	49905	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.703774929 CET	49905	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.703799963 CET	443	49905	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.850967884 CET	443	49903	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.851867914 CET	49903	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.851896048 CET	443	49903	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.853384972 CET	49903	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.853394032 CET	443	49903	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.870543003 CET	443	49902	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.871875048 CET	49902	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.871900082 CET	443	49902	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.873547077 CET	49902	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.873553991 CET	443	49902	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.980412006 CET	443	49901	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.981498957 CET	49901	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.981530905 CET	443	49901	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.982350111 CET	49901	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.982357979 CET	443	49901	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.986182928 CET	443	49903	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.986260891 CET	443	49903	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.986329079 CET	49903	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.986748934 CET	49903	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.986772060 CET	443	49903	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.986785889 CET	49903	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.986793041 CET	443	49903	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.993004084 CET	49906	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.993042946 CET	443	49906	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:32.993207932 CET	49906	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.993416071 CET	49906	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:32.993437052 CET	443	49906	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.011785030 CET	443	49902	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.011846066 CET	443	49902	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.011928082 CET	49902	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.011933088 CET	443	49902	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.011997938 CET	49902	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.012216091 CET	49902	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.012231112 CET	443	49902	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.012275934 CET	49902	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.012281895 CET	443	49902	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.016263962 CET	49907	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.016299963 CET	443	49907	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.016552925 CET	49907	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.016818047 CET	49907	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.016838074 CET	443	49907	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.129479885 CET	443	49901	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.129560947 CET	443	49901	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.129630089 CET	49901	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.130052090 CET	49901	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.130065918 CET	443	49901	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.136125088 CET	49908	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.136153936 CET	443	49908	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.136318922 CET	49908	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.136754990 CET	49908	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.136770010 CET	443	49908	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.408651114 CET	443	49904	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.409560919 CET	49904	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.409576893 CET	443	49904	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.410425901 CET	49904	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.410429955 CET	443	49904	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.465507030 CET	443	49905	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.474371910 CET	49905	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.474390030 CET	443	49905	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.476197004 CET	49905	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.476216078 CET	443	49905	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.547911882 CET	443	49904	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.547986984 CET	443	49904	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.548150063 CET	49904	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.582519054 CET	49904	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.582525969 CET	443	49904	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.589621067 CET	49909	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.589658022 CET	443	49909	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.589807034 CET	49909	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.590147972 CET	49909	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.590163946 CET	443	49909	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.609013081 CET	443	49905	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.609097004 CET	443	49905	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.609460115 CET	49905	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.609536886 CET	49905	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.609536886 CET	49905	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.609551907 CET	443	49905	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.609560966 CET	443	49905	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.613574982 CET	49910	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.613591909 CET	443	49910	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.613653898 CET	49910	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.613815069 CET	49910	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.613827944 CET	443	49910	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.755418062 CET	443	49906	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.756293058 CET	49906	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.756309032 CET	443	49906	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.757091045 CET	49906	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.757097006 CET	443	49906	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.776094913 CET	443	49907	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.776854992 CET	49907	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.776875019 CET	443	49907	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.777477026 CET	49907	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.777491093 CET	443	49907	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.894128084 CET	443	49906	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.894390106 CET	443	49906	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.894480944 CET	49906	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.894481897 CET	49906	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.894519091 CET	49906	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.894537926 CET	443	49906	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.896898985 CET	443	49908	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.897284985 CET	49908	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.897305012 CET	443	49908	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.897803068 CET	49908	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.897808075 CET	443	49908	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.899610996 CET	49911	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.899655104 CET	443	49911	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.899868011 CET	49911	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.900073051 CET	49911	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.900098085 CET	443	49911	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.915266037 CET	443	49907	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.915298939 CET	443	49907	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.915364027 CET	443	49907	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.915374041 CET	49907	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.915465117 CET	49907	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.919564009 CET	49907	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.919564009 CET	49907	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.919584036 CET	443	49907	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.919594049 CET	443	49907	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.922756910 CET	49912	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.922804117 CET	443	49912	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:33.922879934 CET	49912	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.923031092 CET	49912	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:33.923043966 CET	443	49912	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.016290903 CET	49913	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:52:34.016319990 CET	443	49913	142.250.185.100	192.168.2.4
Oct 30, 2024 15:52:34.016524076 CET	49913	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:52:34.017093897 CET	49913	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:52:34.017103910 CET	443	49913	142.250.185.100	192.168.2.4
Oct 30, 2024 15:52:34.473198891 CET	443	49908	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.473277092 CET	443	49908	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.473344088 CET	49908	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.473581076 CET	49908	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.473599911 CET	443	49908	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.473611116 CET	49908	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.473615885 CET	443	49908	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.476815939 CET	49914	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.476866961 CET	443	49914	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.477041960 CET	49914	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.477246046 CET	49914	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.477269888 CET	443	49914	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.611970901 CET	443	49910	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.612549067 CET	49910	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.612567902 CET	443	49910	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.613063097 CET	49910	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.613068104 CET	443	49910	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.618642092 CET	443	49909	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.618998051 CET	49909	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.619018078 CET	443	49909	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.619396925 CET	49909	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.619402885 CET	443	49909	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.682630062 CET	443	49912	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.683003902 CET	49912	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.683049917 CET	443	49912	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.683406115 CET	49912	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.683419943 CET	443	49912	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.692665100 CET	443	49911	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.693018913 CET	49911	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.693037033 CET	443	49911	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.693408012 CET	49911	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.693416119 CET	443	49911	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.750236034 CET	443	49910	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.750294924 CET	443	49910	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.750449896 CET	49910	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.750650883 CET	49910	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.750663042 CET	443	49910	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.750677109 CET	49910	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.750683069 CET	443	49910	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.753942013 CET	49915	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.753971100 CET	443	49915	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.754036903 CET	49915	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.754175901 CET	49915	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.754190922 CET	443	49915	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.763402939 CET	443	49909	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.763461113 CET	443	49909	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.763524055 CET	443	49909	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.763597012 CET	49909	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.763689041 CET	49909	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.763696909 CET	443	49909	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.763708115 CET	49909	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.763714075 CET	443	49909	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.765969038 CET	49916	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.765991926 CET	443	49916	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.766063929 CET	49916	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.766239882 CET	49916	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.766252041 CET	443	49916	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.775331974 CET	49737	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:52:34.775424004 CET	443	49737	172.217.18.14	192.168.2.4
Oct 30, 2024 15:52:34.775583982 CET	443	49737	172.217.18.14	192.168.2.4
Oct 30, 2024 15:52:34.775605917 CET	49737	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:52:34.775669098 CET	49737	443	192.168.2.4	172.217.18.14
Oct 30, 2024 15:52:34.775764942 CET	49917	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:34.775799990 CET	443	49917	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:34.775908947 CET	49917	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:34.776338100 CET	49917	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:34.776354074 CET	443	49917	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:34.822998047 CET	443	49912	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.823201895 CET	443	49912	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.823270082 CET	49912	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.823301077 CET	49912	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.823321104 CET	443	49912	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.823335886 CET	49912	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.823344946 CET	443	49912	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.825510979 CET	49918	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.825551987 CET	443	49918	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.825620890 CET	49918	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.825750113 CET	49918	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.825763941 CET	443	49918	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.838929892 CET	443	49911	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.839030027 CET	443	49911	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.839097977 CET	49911	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.839226007 CET	49911	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.839226007 CET	49911	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.839238882 CET	443	49911	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.839247942 CET	443	49911	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.841114044 CET	49919	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.841164112 CET	443	49919	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.841310024 CET	49919	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.841461897 CET	49919	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:34.841475010 CET	443	49919	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:34.857059956 CET	443	49913	142.250.185.100	192.168.2.4
Oct 30, 2024 15:52:34.857299089 CET	49913	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:52:34.857312918 CET	443	49913	142.250.185.100	192.168.2.4
Oct 30, 2024 15:52:34.858386993 CET	443	49913	142.250.185.100	192.168.2.4
Oct 30, 2024 15:52:34.858457088 CET	49913	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:52:34.858789921 CET	49913	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:52:34.858853102 CET	443	49913	142.250.185.100	192.168.2.4
Oct 30, 2024 15:52:34.909377098 CET	49913	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:52:34.909389019 CET	443	49913	142.250.185.100	192.168.2.4
Oct 30, 2024 15:52:34.960123062 CET	49913	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:52:35.508892059 CET	443	49914	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.509401083 CET	49914	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.509419918 CET	443	49914	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.509917021 CET	49914	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.509922028 CET	443	49914	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.642718077 CET	443	49918	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.643455029 CET	49918	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.643469095 CET	443	49918	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.644047976 CET	49918	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.644052982 CET	443	49918	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.646990061 CET	443	49915	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.647360086 CET	49915	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.647378922 CET	443	49915	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.647854090 CET	49915	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.647860050 CET	443	49915	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.647905111 CET	443	49916	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.648220062 CET	49916	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.648232937 CET	443	49916	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.648652077 CET	49916	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.648672104 CET	443	49916	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.648689985 CET	443	49919	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.648925066 CET	49919	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.648961067 CET	443	49919	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.649306059 CET	49919	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.649313927 CET	443	49919	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.655813932 CET	443	49917	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:35.656099081 CET	49917	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:35.656106949 CET	443	49917	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:35.656518936 CET	443	49917	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:35.656585932 CET	49917	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:35.657269001 CET	443	49917	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:35.657332897 CET	49917	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:35.657624960 CET	49917	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:35.657682896 CET	443	49917	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:35.657836914 CET	49917	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:35.657857895 CET	443	49917	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:35.657885075 CET	49917	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:35.658451080 CET	443	49914	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.658787012 CET	443	49914	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.658833027 CET	443	49914	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.658870935 CET	49914	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.658900976 CET	49914	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.658968925 CET	49914	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.658984900 CET	443	49914	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.659030914 CET	49914	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.659037113 CET	443	49914	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.661887884 CET	49920	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.661926031 CET	443	49920	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.662225962 CET	49920	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.662357092 CET	49920	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.662375927 CET	443	49920	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.703340054 CET	443	49917	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:35.705485106 CET	49917	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:35.782224894 CET	443	49918	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.782305956 CET	443	49918	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.782372952 CET	49918	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.782815933 CET	49918	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.782821894 CET	443	49918	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.782831907 CET	49918	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.782838106 CET	443	49918	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.782955885 CET	443	49915	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.783020973 CET	443	49915	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.783077955 CET	49915	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.783229113 CET	49915	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.783240080 CET	443	49915	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.783281088 CET	49915	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.783287048 CET	443	49915	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.786665916 CET	49921	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.786688089 CET	443	49921	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.786783934 CET	49921	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.786844969 CET	49922	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.786871910 CET	443	49922	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.786933899 CET	49922	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.786974907 CET	49921	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.787000895 CET	443	49921	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.787143946 CET	49922	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.787153959 CET	443	49922	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.790589094 CET	443	49916	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.790652990 CET	443	49916	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.790721893 CET	49916	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.790786028 CET	49916	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.790791988 CET	443	49916	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.790802002 CET	49916	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.790806055 CET	443	49916	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.791425943 CET	443	49919	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.791454077 CET	443	49919	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.791500092 CET	443	49919	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.791505098 CET	49919	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.791579962 CET	49919	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.791719913 CET	49919	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.791728020 CET	443	49919	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.791737080 CET	49919	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.791743040 CET	443	49919	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.793006897 CET	49923	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.793018103 CET	443	49923	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.793279886 CET	49923	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.793406010 CET	49923	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.793421030 CET	443	49923	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.793525934 CET	49924	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.793564081 CET	443	49924	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.793621063 CET	49924	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.793767929 CET	49924	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:35.793781996 CET	443	49924	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:35.944785118 CET	443	49917	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:35.988395929 CET	49917	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:35.988425970 CET	443	49917	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:35.989141941 CET	49917	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:35.989237070 CET	443	49917	142.250.74.206	192.168.2.4
Oct 30, 2024 15:52:35.989326000 CET	49917	443	192.168.2.4	142.250.74.206
Oct 30, 2024 15:52:35.994690895 CET	49925	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:35.994728088 CET	443	49925	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:35.994823933 CET	49925	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:35.995054960 CET	49925	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:35.995070934 CET	443	49925	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:36.429393053 CET	443	49920	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.429985046 CET	49920	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.430005074 CET	443	49920	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.430506945 CET	49920	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.430511951 CET	443	49920	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.535188913 CET	443	49921	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.535243034 CET	443	49922	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.535832882 CET	49921	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.535851955 CET	443	49921	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.536061049 CET	49922	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.536089897 CET	443	49922	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.536240101 CET	49921	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.536245108 CET	443	49921	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.536520958 CET	49922	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.536528111 CET	443	49922	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.541724920 CET	443	49924	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.542197943 CET	49924	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.542233944 CET	443	49924	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.542675018 CET	49924	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.542682886 CET	443	49924	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.560986996 CET	443	49923	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.561595917 CET	49923	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.561625957 CET	443	49923	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.562112093 CET	49923	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.562118053 CET	443	49923	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.569632053 CET	443	49920	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.569734097 CET	443	49920	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.569895029 CET	49920	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.569935083 CET	49920	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.569957018 CET	443	49920	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.569977999 CET	49920	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.569984913 CET	443	49920	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.572906971 CET	49926	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.572951078 CET	443	49926	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.573025942 CET	49926	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.573201895 CET	49926	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.573213100 CET	443	49926	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.668936968 CET	443	49922	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.669018984 CET	443	49922	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.669090033 CET	49922	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.669277906 CET	49922	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.669295073 CET	443	49922	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.669311047 CET	49922	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.669317007 CET	443	49922	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.671588898 CET	443	49921	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.671648026 CET	443	49921	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.671879053 CET	49921	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.672064066 CET	49921	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.672064066 CET	49921	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.672075987 CET	443	49921	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.672094107 CET	443	49921	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.672729015 CET	49927	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.672760010 CET	443	49927	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.672926903 CET	49927	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.673156977 CET	49927	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.673171043 CET	443	49927	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.674472094 CET	49928	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.674489975 CET	443	49928	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.674705982 CET	49928	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.674819946 CET	49928	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.674832106 CET	443	49928	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.679389000 CET	443	49924	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.679462910 CET	443	49924	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.679574966 CET	49924	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.679691076 CET	49924	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.679702044 CET	443	49924	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.679713011 CET	49924	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.679718018 CET	443	49924	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.681988955 CET	49929	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.682018995 CET	443	49929	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.682076931 CET	49929	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.682183981 CET	49929	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.682200909 CET	443	49929	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.699470997 CET	443	49923	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.699511051 CET	443	49923	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.699618101 CET	443	49923	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.699687958 CET	49923	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.699752092 CET	49923	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.699768066 CET	443	49923	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.699783087 CET	49923	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.699790001 CET	443	49923	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.702224016 CET	49930	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.702250957 CET	443	49930	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.702316046 CET	49930	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.702461004 CET	49930	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:36.702474117 CET	443	49930	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:36.843672991 CET	443	49925	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:36.844104052 CET	49925	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:36.844120026 CET	443	49925	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:36.844484091 CET	443	49925	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:36.844548941 CET	49925	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:36.845196009 CET	443	49925	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:36.845247030 CET	49925	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:36.845643997 CET	49925	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:36.845702887 CET	443	49925	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:36.845869064 CET	49925	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:36.845875978 CET	443	49925	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:36.892679930 CET	49925	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:37.124063015 CET	443	49925	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:37.124094009 CET	443	49925	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:37.124155998 CET	49925	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:37.124176025 CET	443	49925	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:37.125951052 CET	49925	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:37.125997066 CET	443	49925	142.250.185.142	192.168.2.4
Oct 30, 2024 15:52:37.126113892 CET	49925	443	192.168.2.4	142.250.185.142
Oct 30, 2024 15:52:37.346101046 CET	443	49926	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:37.347964048 CET	49926	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:37.348001957 CET	443	49926	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:37.349016905 CET	49926	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:37.349030972 CET	443	49926	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:37.880853891 CET	443	49929	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:37.881460905 CET	49929	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:37.881484985 CET	443	49929	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:37.881495953 CET	443	49927	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:37.881953955 CET	49927	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:37.881968975 CET	443	49927	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:37.882088900 CET	49929	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:37.882095098 CET	443	49929	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:37.882416010 CET	443	49930	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:37.882448912 CET	49927	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:37.882455111 CET	443	49927	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:37.882760048 CET	49930	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:37.882771969 CET	443	49930	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:37.883161068 CET	49930	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:37.883167982 CET	443	49930	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:37.884382010 CET	443	49928	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:37.884696960 CET	49928	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:37.884710073 CET	443	49928	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:37.885051012 CET	49928	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:37.885056019 CET	443	49928	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.006516933 CET	443	49926	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.006617069 CET	443	49926	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.006876945 CET	49926	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.006997108 CET	49926	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.007026911 CET	443	49926	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.007040024 CET	49926	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.007062912 CET	443	49926	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.015670061 CET	49931	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.015681028 CET	443	49931	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.015947104 CET	49931	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.016093016 CET	49931	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.016103029 CET	443	49931	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.018394947 CET	443	49929	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.018470049 CET	443	49929	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.018527031 CET	49929	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.018774033 CET	49929	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.018779039 CET	443	49929	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.018789053 CET	49929	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.018793106 CET	443	49929	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.021446943 CET	49932	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.021482944 CET	443	49932	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.021547079 CET	49932	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.021773100 CET	49932	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.021789074 CET	443	49932	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.022209883 CET	443	49930	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.022358894 CET	443	49930	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.022404909 CET	49930	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.022418022 CET	443	49930	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.022433996 CET	443	49930	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.022453070 CET	443	49927	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.022492886 CET	49930	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.022537947 CET	49930	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.022542000 CET	443	49930	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.022552967 CET	49930	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.022557020 CET	443	49930	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.022717953 CET	443	49927	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.022794962 CET	49927	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.022978067 CET	49927	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.022985935 CET	443	49927	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.022998095 CET	49927	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.023003101 CET	443	49927	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.023649931 CET	443	49928	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.023700953 CET	443	49928	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.023744106 CET	443	49928	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.023761988 CET	49928	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.023796082 CET	49928	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.024169922 CET	49928	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.024173975 CET	443	49928	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.024183989 CET	49928	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.024188042 CET	443	49928	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.025703907 CET	49933	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.025721073 CET	443	49933	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.025808096 CET	49933	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.025871992 CET	49934	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.025907040 CET	443	49934	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.025993109 CET	49934	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.026249886 CET	49934	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.026267052 CET	443	49934	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.026299000 CET	49933	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.026310921 CET	443	49933	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.026912928 CET	49935	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.026921034 CET	443	49935	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.027017117 CET	49935	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.027110100 CET	49935	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.027113914 CET	443	49935	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.770257950 CET	443	49931	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.770811081 CET	49931	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.770828009 CET	443	49931	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.771337986 CET	49931	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.771342993 CET	443	49931	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.776268005 CET	443	49932	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.776887894 CET	49932	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.776921988 CET	443	49932	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.777421951 CET	49932	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.777434111 CET	443	49932	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.785823107 CET	443	49933	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.786257029 CET	49933	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.786293983 CET	443	49933	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.786717892 CET	49933	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.786724091 CET	443	49933	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.792154074 CET	443	49934	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.792675018 CET	49934	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.792704105 CET	443	49934	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.793148041 CET	49934	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.793154001 CET	443	49934	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.797172070 CET	443	49935	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.797686100 CET	49935	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.797702074 CET	443	49935	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.798167944 CET	49935	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.798172951 CET	443	49935	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.907629967 CET	443	49931	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.907685995 CET	443	49931	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.907789946 CET	49931	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.907989979 CET	49931	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.907995939 CET	443	49931	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.908006907 CET	49931	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.908013105 CET	443	49931	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.911464930 CET	49936	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.911482096 CET	443	49936	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.911714077 CET	49936	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.911885977 CET	49936	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.911897898 CET	443	49936	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.914800882 CET	443	49932	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.914833069 CET	443	49932	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.914877892 CET	49932	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.914881945 CET	443	49932	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.914947033 CET	49932	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.915137053 CET	49932	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.915137053 CET	49932	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.915153980 CET	443	49932	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.915163994 CET	443	49932	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.918143988 CET	49937	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.918167114 CET	443	49937	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.918256998 CET	49937	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.918426991 CET	49937	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.918438911 CET	443	49937	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.923798084 CET	443	49933	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.923827887 CET	443	49933	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.923882961 CET	443	49933	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.923883915 CET	49933	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.924021006 CET	49933	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.924468040 CET	49933	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.924479008 CET	443	49933	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.927335024 CET	49938	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.927345991 CET	443	49938	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.927405119 CET	49938	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.927571058 CET	49938	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.927586079 CET	443	49938	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.930562973 CET	443	49934	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.930622101 CET	443	49934	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.930763006 CET	49934	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.930883884 CET	49934	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.930883884 CET	49934	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.930892944 CET	443	49934	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.930901051 CET	443	49934	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.933469057 CET	49939	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.933484077 CET	443	49939	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.933823109 CET	49939	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.933924913 CET	49939	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.933937073 CET	443	49939	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.942714930 CET	443	49935	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.942912102 CET	443	49935	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.942970037 CET	49935	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.943021059 CET	49935	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.943038940 CET	443	49935	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.943051100 CET	49935	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.943057060 CET	443	49935	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.946305990 CET	49940	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.946330070 CET	443	49940	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:38.946393967 CET	49940	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.946567059 CET	49940	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:38.946577072 CET	443	49940	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.658143997 CET	443	49936	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.658638954 CET	49936	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.658660889 CET	443	49936	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.659477949 CET	49936	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.659485102 CET	443	49936	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.679119110 CET	443	49937	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.679788113 CET	49937	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.679816961 CET	443	49937	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.680258989 CET	49937	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.680265903 CET	443	49937	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.692401886 CET	443	49938	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.694570065 CET	49938	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.694581032 CET	443	49938	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.695528984 CET	49938	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.695533991 CET	443	49938	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.701606989 CET	443	49940	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.702074051 CET	49940	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.702109098 CET	443	49940	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.702502966 CET	49940	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.702508926 CET	443	49940	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.707578897 CET	443	49939	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.708192110 CET	49939	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.708220959 CET	443	49939	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.708813906 CET	49939	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.708823919 CET	443	49939	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.794869900 CET	443	49936	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.794894934 CET	443	49936	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.794933081 CET	443	49936	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.794971943 CET	49936	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.795022964 CET	49936	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.795324087 CET	49936	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.795337915 CET	443	49936	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.795346975 CET	49936	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.795353889 CET	443	49936	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.798804045 CET	49941	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.798850060 CET	443	49941	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.799014091 CET	49941	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.799398899 CET	49941	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.799416065 CET	443	49941	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.818296909 CET	443	49937	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.818418980 CET	443	49937	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.818523884 CET	49937	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.819401979 CET	49937	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.819425106 CET	443	49937	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.819434881 CET	49937	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.819442034 CET	443	49937	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.823852062 CET	49942	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.823899031 CET	443	49942	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.823976994 CET	49942	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.824163914 CET	49942	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.824172974 CET	443	49942	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.832612991 CET	443	49938	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.832781076 CET	443	49938	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.832873106 CET	49938	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.833225012 CET	49938	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.833231926 CET	443	49938	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.833240986 CET	49938	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.833245039 CET	443	49938	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.837450981 CET	49943	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.837517977 CET	443	49943	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.837646961 CET	49943	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.837917089 CET	49943	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.837934971 CET	443	49943	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.839627028 CET	443	49940	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.839663982 CET	443	49940	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.839723110 CET	443	49940	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.839782953 CET	49940	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.839834929 CET	49940	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.840066910 CET	49940	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.840084076 CET	443	49940	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.840095043 CET	49940	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.840101004 CET	443	49940	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.843064070 CET	49944	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.843087912 CET	443	49944	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.843211889 CET	49944	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.843369007 CET	49944	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.843390942 CET	443	49944	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.848601103 CET	443	49939	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.848659992 CET	443	49939	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.848743916 CET	49939	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.848953962 CET	49939	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.848970890 CET	443	49939	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.849005938 CET	49939	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.849011898 CET	443	49939	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.853141069 CET	49945	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.853173971 CET	443	49945	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:39.853286028 CET	49945	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.853473902 CET	49945	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:39.853487968 CET	443	49945	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.559700966 CET	443	49941	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.560374975 CET	49941	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.560425043 CET	443	49941	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.560866117 CET	49941	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.560878038 CET	443	49941	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.572623014 CET	443	49942	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.573101044 CET	49942	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.573121071 CET	443	49942	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.573554039 CET	49942	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.573559999 CET	443	49942	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.606477022 CET	443	49945	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.606991053 CET	49945	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.607017040 CET	443	49945	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.607350111 CET	49945	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.607355118 CET	443	49945	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.621335983 CET	443	49943	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.621828079 CET	49943	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.621851921 CET	443	49943	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.622302055 CET	49943	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.622308016 CET	443	49943	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.623241901 CET	443	49944	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.623662949 CET	49944	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.623677015 CET	443	49944	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.624100924 CET	49944	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.624104977 CET	443	49944	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.699369907 CET	443	49941	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.699424982 CET	443	49941	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.699501038 CET	49941	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.699785948 CET	49941	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.699810028 CET	443	49941	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.699821949 CET	49941	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.699827909 CET	443	49941	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.703430891 CET	49946	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.703452110 CET	443	49946	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.703531981 CET	49946	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.703702927 CET	49946	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.703716993 CET	443	49946	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.713655949 CET	443	49942	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.713685036 CET	443	49942	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.713740110 CET	49942	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.713758945 CET	443	49942	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.713773966 CET	443	49942	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.713828087 CET	49942	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.714060068 CET	49942	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.714075089 CET	443	49942	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.714091063 CET	49942	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.714096069 CET	443	49942	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.717067957 CET	49947	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.717109919 CET	443	49947	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.717185974 CET	49947	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.717403889 CET	49947	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.717412949 CET	443	49947	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.745313883 CET	443	49945	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.745372057 CET	443	49945	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.745423079 CET	49945	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.746187925 CET	49945	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.746187925 CET	49945	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.746203899 CET	443	49945	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.746213913 CET	443	49945	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.750798941 CET	49948	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.750823021 CET	443	49948	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.750901937 CET	49948	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.751224995 CET	49948	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.751230955 CET	443	49948	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.765573978 CET	443	49944	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.765652895 CET	443	49944	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.765717030 CET	49944	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.765908957 CET	49944	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.765928030 CET	443	49944	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.765947104 CET	49944	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.765957117 CET	443	49944	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.769417048 CET	49949	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.769464016 CET	443	49949	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.769548893 CET	49949	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.769747972 CET	49949	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.769759893 CET	443	49949	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.914110899 CET	443	49943	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.914297104 CET	443	49943	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.914360046 CET	49943	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.914472103 CET	49943	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.914490938 CET	443	49943	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.914505005 CET	49943	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.914514065 CET	443	49943	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.917670965 CET	49950	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.917714119 CET	443	49950	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:40.917781115 CET	49950	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.917951107 CET	49950	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:40.917964935 CET	443	49950	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.104317904 CET	443	49946	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.105047941 CET	49946	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.105065107 CET	443	49946	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.105515003 CET	49946	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.105528116 CET	443	49946	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.106571913 CET	443	49949	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.106928110 CET	49949	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.106946945 CET	443	49949	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.107319117 CET	49949	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.107326984 CET	443	49949	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.109814882 CET	443	49948	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.110229969 CET	49948	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.110244989 CET	443	49948	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.110340118 CET	443	49947	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.110598087 CET	49948	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.110613108 CET	443	49948	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.110841036 CET	49947	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.110865116 CET	443	49947	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.111222982 CET	49947	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.111227989 CET	443	49947	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.242816925 CET	443	49946	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.242990971 CET	443	49946	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.243041039 CET	443	49946	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.243113995 CET	49946	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.243113995 CET	49946	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.243309975 CET	49946	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.243309975 CET	49946	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.243330956 CET	443	49946	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.243341923 CET	443	49946	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.246242046 CET	443	49949	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.246408939 CET	443	49949	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.246562004 CET	443	49948	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.246596098 CET	49951	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.246596098 CET	49949	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.246628046 CET	443	49951	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.246630907 CET	443	49948	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.246682882 CET	443	49948	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.246773005 CET	49948	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.246773005 CET	49948	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.246756077 CET	49951	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.246922970 CET	49949	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.246923923 CET	49949	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.246963024 CET	443	49949	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.246968031 CET	443	49949	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.247067928 CET	49951	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.247087955 CET	443	49951	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.247277021 CET	49948	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.247277021 CET	49948	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.247287035 CET	443	49948	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.247304916 CET	443	49948	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.249828100 CET	49952	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.249839067 CET	443	49952	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.249842882 CET	49953	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.249877930 CET	443	49953	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.249902964 CET	49952	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.249927998 CET	49953	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.250087976 CET	49952	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.250099897 CET	443	49952	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.250204086 CET	49953	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.250217915 CET	443	49953	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.254461050 CET	443	49947	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.254534960 CET	443	49947	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.254704952 CET	49947	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.254704952 CET	49947	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.254728079 CET	49947	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.254738092 CET	443	49947	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.257179976 CET	49954	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.257189035 CET	443	49954	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.257265091 CET	49954	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.257450104 CET	49954	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.257461071 CET	443	49954	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.756000996 CET	443	49950	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.759953022 CET	49950	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.759980917 CET	443	49950	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.760356903 CET	49950	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.760365009 CET	443	49950	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.899631977 CET	443	49950	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.899736881 CET	443	49950	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.899821043 CET	49950	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.922219992 CET	49950	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.922219992 CET	49950	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.922236919 CET	443	49950	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.922249079 CET	443	49950	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.996741056 CET	49955	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.996812105 CET	443	49955	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:42.996875048 CET	49955	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.997257948 CET	49955	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:42.997282982 CET	443	49955	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.205058098 CET	443	49953	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.205178022 CET	443	49951	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.205188990 CET	443	49954	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.207170010 CET	443	49952	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.241622925 CET	49952	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.241643906 CET	443	49952	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.242877960 CET	49952	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.242885113 CET	443	49952	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.243757963 CET	49953	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.243789911 CET	443	49953	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.244745970 CET	49953	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.244751930 CET	443	49953	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.245439053 CET	49951	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.245471954 CET	443	49951	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.246263981 CET	49951	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.246270895 CET	443	49951	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.246906042 CET	49954	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.246922970 CET	443	49954	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.247755051 CET	49954	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.247762918 CET	443	49954	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.378063917 CET	443	49952	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.378226995 CET	443	49952	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.378312111 CET	49952	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.380733967 CET	443	49953	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.380821943 CET	443	49953	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.380918026 CET	49953	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.383142948 CET	443	49954	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.383213997 CET	443	49954	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.383241892 CET	49952	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.383260012 CET	443	49952	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.383270979 CET	49952	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.383270979 CET	49954	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.383280039 CET	443	49952	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.385654926 CET	49954	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.385665894 CET	443	49954	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.385677099 CET	49954	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.385682106 CET	443	49954	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.386503935 CET	49953	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.386526108 CET	443	49953	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.386539936 CET	49953	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.386547089 CET	443	49953	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.388777971 CET	443	49951	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.389064074 CET	443	49951	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.389118910 CET	49951	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.390079021 CET	49951	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.390090942 CET	443	49951	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.395870924 CET	49956	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.395905972 CET	443	49956	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.395968914 CET	49956	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.398430109 CET	49957	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.398457050 CET	443	49957	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.398643970 CET	49957	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.398828030 CET	49956	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.398843050 CET	443	49956	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.400852919 CET	49958	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.400867939 CET	443	49958	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.401072025 CET	49957	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.401086092 CET	443	49957	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.401093960 CET	49958	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.401417017 CET	49958	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.401424885 CET	443	49958	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.403250933 CET	49959	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.403266907 CET	443	49959	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.403331995 CET	49959	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.403758049 CET	49959	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.403769016 CET	443	49959	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.968955040 CET	443	49955	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.970585108 CET	49955	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.970633984 CET	443	49955	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:43.972536087 CET	49955	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:43.972547054 CET	443	49955	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.107645988 CET	443	49955	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.107738018 CET	443	49955	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.107791901 CET	49955	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.108550072 CET	49955	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.108572006 CET	443	49955	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.115616083 CET	49960	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.115644932 CET	443	49960	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.115739107 CET	49960	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.116061926 CET	49960	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.116077900 CET	443	49960	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.157593966 CET	443	49957	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.158154964 CET	49957	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.158174038 CET	443	49957	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.158987999 CET	49957	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.158996105 CET	443	49957	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.160480976 CET	443	49956	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.160834074 CET	443	49958	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.160849094 CET	49956	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.160876989 CET	443	49956	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.161279917 CET	49956	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.161288023 CET	443	49956	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.161318064 CET	49958	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.161324978 CET	443	49958	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.161659002 CET	49958	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.161664963 CET	443	49958	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.221506119 CET	443	49959	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.222045898 CET	49959	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.222062111 CET	443	49959	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.222714901 CET	49959	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.222719908 CET	443	49959	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.294444084 CET	443	49957	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.294812918 CET	443	49957	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.294891119 CET	49957	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.294935942 CET	49957	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.294935942 CET	49957	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.294954062 CET	443	49957	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.294962883 CET	443	49957	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.298299074 CET	49961	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.298340082 CET	443	49961	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.298432112 CET	49961	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.298772097 CET	49961	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.298788071 CET	443	49961	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.300955057 CET	443	49956	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.301629066 CET	443	49958	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.301706076 CET	443	49958	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.301806927 CET	49958	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.301969051 CET	49958	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.301985025 CET	443	49958	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.302011967 CET	49958	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.302017927 CET	443	49958	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.302323103 CET	443	49956	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.302366972 CET	443	49956	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.302383900 CET	49956	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.302423000 CET	49956	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.302488089 CET	49956	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.302494049 CET	443	49956	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.302510023 CET	49956	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.302515984 CET	443	49956	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.305556059 CET	49962	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.305583954 CET	443	49962	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.305689096 CET	49962	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.305835962 CET	49963	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.305860043 CET	49962	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.305870056 CET	443	49963	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.305872917 CET	443	49962	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.305932999 CET	49963	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.306793928 CET	49963	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.306809902 CET	443	49963	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.365098000 CET	443	49959	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.365180016 CET	443	49959	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.365236044 CET	49959	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.365458012 CET	49959	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.365458012 CET	49959	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.365479946 CET	443	49959	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.365489006 CET	443	49959	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.368670940 CET	49964	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.368706942 CET	443	49964	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.368824959 CET	49964	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.369106054 CET	49964	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.369123936 CET	443	49964	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.857177019 CET	443	49960	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.858360052 CET	49960	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.858378887 CET	443	49960	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.859723091 CET	49960	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.859730005 CET	443	49960	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.863867044 CET	443	49913	142.250.185.100	192.168.2.4
Oct 30, 2024 15:52:44.863934040 CET	443	49913	142.250.185.100	192.168.2.4
Oct 30, 2024 15:52:44.864128113 CET	49913	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:52:44.992495060 CET	443	49960	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.992521048 CET	443	49960	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.992585897 CET	443	49960	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.992626905 CET	49960	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.992657900 CET	49960	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.993042946 CET	49960	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.993042946 CET	49960	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:44.993057013 CET	443	49960	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:44.993066072 CET	443	49960	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.000102997 CET	49965	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.000147104 CET	443	49965	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.000226021 CET	49965	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.001348019 CET	49965	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.001363993 CET	443	49965	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.056561947 CET	443	49961	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.057189941 CET	49961	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.057235956 CET	443	49961	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.057925940 CET	49961	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.057954073 CET	443	49961	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.063082933 CET	443	49963	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.066576958 CET	49963	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.066617012 CET	443	49963	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.067334890 CET	49963	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.067351103 CET	443	49963	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.070159912 CET	443	49962	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.070801020 CET	49962	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.070827961 CET	443	49962	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.078725100 CET	49962	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.078732014 CET	443	49962	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.135538101 CET	443	49964	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.136877060 CET	49964	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.136893034 CET	443	49964	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.138082027 CET	49964	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.138087988 CET	443	49964	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.192457914 CET	443	49961	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.192481041 CET	443	49961	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.192523003 CET	443	49961	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.192555904 CET	49961	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.192615032 CET	49961	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.192987919 CET	49961	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.193021059 CET	443	49961	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.197988033 CET	49966	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.198013067 CET	443	49966	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.198096991 CET	49966	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.198385954 CET	49966	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.198398113 CET	443	49966	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.215656996 CET	443	49963	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.215723991 CET	443	49963	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.215858936 CET	443	49962	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.215882063 CET	443	49962	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.215898991 CET	49963	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.215919971 CET	443	49962	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.215935946 CET	49963	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.215935946 CET	49963	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.215940952 CET	49962	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.215960979 CET	443	49963	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.215974092 CET	443	49963	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.216000080 CET	49962	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.218523026 CET	49962	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.218523026 CET	49962	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.218547106 CET	443	49962	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.218558073 CET	443	49962	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.225119114 CET	49967	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.225159883 CET	443	49967	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.225403070 CET	49967	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.227626085 CET	49968	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.227669954 CET	443	49968	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.227845907 CET	49968	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.228224039 CET	49967	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.228240013 CET	443	49967	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.228768110 CET	49968	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.228790998 CET	443	49968	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.275697947 CET	443	49964	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.275715113 CET	443	49964	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.275744915 CET	443	49964	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.275779009 CET	49964	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.275871992 CET	49964	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.276217937 CET	49964	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.276217937 CET	49964	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.276228905 CET	443	49964	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.276237965 CET	443	49964	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.280257940 CET	49969	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.280280113 CET	443	49969	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.280443907 CET	49969	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.280639887 CET	49969	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.280651093 CET	443	49969	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.795646906 CET	443	49965	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.796202898 CET	49965	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.796236038 CET	443	49965	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.796785116 CET	49965	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.796801090 CET	443	49965	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.939538956 CET	443	49965	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.939614058 CET	443	49965	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.939806938 CET	49965	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.939867973 CET	49965	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.939887047 CET	443	49965	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.939903975 CET	49965	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.939908981 CET	443	49965	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.942951918 CET	49970	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.942984104 CET	443	49970	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.943087101 CET	49970	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.943203926 CET	49970	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.943216085 CET	443	49970	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.962528944 CET	443	49966	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.962980986 CET	49966	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.962997913 CET	443	49966	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.963460922 CET	49966	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.963466883 CET	443	49966	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.976485968 CET	443	49968	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.978075027 CET	49968	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.978094101 CET	443	49968	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.979234934 CET	49968	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.979239941 CET	443	49968	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.979988098 CET	49913	443	192.168.2.4	142.250.185.100
Oct 30, 2024 15:52:45.980000019 CET	443	49913	142.250.185.100	192.168.2.4
Oct 30, 2024 15:52:45.981048107 CET	443	49967	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.982506037 CET	49967	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.982536077 CET	443	49967	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:45.983691931 CET	49967	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:45.983701944 CET	443	49967	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.035103083 CET	443	49969	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.035945892 CET	49969	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.035959959 CET	443	49969	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.036578894 CET	49969	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.036582947 CET	443	49969	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.103718042 CET	443	49966	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.103746891 CET	443	49966	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.103805065 CET	443	49966	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.103810072 CET	49966	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.103871107 CET	49966	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.104984999 CET	49966	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.104999065 CET	443	49966	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.112849951 CET	49972	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.112898111 CET	443	49972	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.112961054 CET	49972	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.113075018 CET	443	49968	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.113256931 CET	443	49968	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.113308907 CET	443	49968	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.113385916 CET	49968	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.113385916 CET	49968	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.113518953 CET	49972	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.113534927 CET	443	49972	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.113675117 CET	49968	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.113675117 CET	49968	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.113691092 CET	443	49968	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.113708019 CET	443	49968	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.118124962 CET	49973	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.118154049 CET	443	49973	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.118278980 CET	49973	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.118422985 CET	443	49967	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.118447065 CET	443	49967	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.118490934 CET	443	49967	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.118503094 CET	49967	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.118539095 CET	49967	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.118818045 CET	49967	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.118832111 CET	443	49967	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.118940115 CET	49967	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.118946075 CET	443	49967	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.119060993 CET	49973	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.119081974 CET	443	49973	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.122899055 CET	49974	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.122930050 CET	443	49974	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.123011112 CET	49974	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.123259068 CET	49974	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.123275042 CET	443	49974	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.174822092 CET	443	49969	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.174952984 CET	443	49969	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.175021887 CET	49969	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.185601950 CET	49969	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.185612917 CET	443	49969	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.185792923 CET	49969	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.185798883 CET	443	49969	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.193317890 CET	49975	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.193361998 CET	443	49975	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.193428040 CET	49975	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.193830967 CET	49975	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.193844080 CET	443	49975	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.710963011 CET	443	49970	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.711671114 CET	49970	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.711684942 CET	443	49970	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.712490082 CET	49970	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.712493896 CET	443	49970	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.850585938 CET	443	49970	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.850662947 CET	443	49970	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.850960016 CET	49970	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.850960016 CET	49970	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.850986958 CET	49970	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.851001024 CET	443	49970	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.855191946 CET	49976	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.855216980 CET	443	49976	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.855290890 CET	49976	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.855654955 CET	49976	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.855665922 CET	443	49976	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.895952940 CET	443	49972	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.896047115 CET	443	49973	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.896612883 CET	49972	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.896646023 CET	443	49972	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.897461891 CET	49972	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.897475004 CET	443	49972	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.898139000 CET	49973	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.898154974 CET	443	49973	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.898879051 CET	49973	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.898885012 CET	443	49973	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.903448105 CET	443	49974	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.904234886 CET	49974	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.904251099 CET	443	49974	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.905174017 CET	49974	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.905179024 CET	443	49974	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.950579882 CET	443	49975	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.951284885 CET	49975	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.951317072 CET	443	49975	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:46.952161074 CET	49975	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:46.952164888 CET	443	49975	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.033396006 CET	443	49972	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.033468962 CET	443	49972	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.033620119 CET	49972	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.034590960 CET	49972	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.034610033 CET	443	49972	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.034616947 CET	49972	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.034622908 CET	443	49972	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.036933899 CET	443	49973	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.036963940 CET	443	49973	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.037012100 CET	443	49973	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.037046909 CET	49973	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.037122965 CET	49973	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.038233995 CET	49973	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.038274050 CET	443	49973	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.042534113 CET	49977	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.042546034 CET	443	49977	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.042613029 CET	49977	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.043726921 CET	49977	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.043740034 CET	443	49977	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.044874907 CET	443	49974	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.045095921 CET	443	49974	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.045176029 CET	49974	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.045192957 CET	49974	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.045200109 CET	443	49974	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.048564911 CET	49978	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.048605919 CET	443	49978	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.048674107 CET	49978	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.051150084 CET	49979	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.051162004 CET	443	49979	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.051235914 CET	49979	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.051825047 CET	49978	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.051850080 CET	443	49978	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.051908016 CET	49979	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.051920891 CET	443	49979	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.091739893 CET	443	49975	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.091767073 CET	443	49975	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.091806889 CET	443	49975	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.091854095 CET	49975	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.091885090 CET	49975	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.092205048 CET	49975	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.092219114 CET	443	49975	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.092231035 CET	49975	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.092236042 CET	443	49975	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.095262051 CET	49980	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.095321894 CET	443	49980	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.095411062 CET	49980	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.095632076 CET	49980	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.095654011 CET	443	49980	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.612404108 CET	443	49976	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.613061905 CET	49976	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.613089085 CET	443	49976	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.613542080 CET	49976	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.613547087 CET	443	49976	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.751025915 CET	443	49976	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.751101017 CET	443	49976	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.751163006 CET	49976	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.751566887 CET	49976	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.751586914 CET	443	49976	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.751596928 CET	49976	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.751602888 CET	443	49976	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.755243063 CET	49982	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.755287886 CET	443	49982	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.755408049 CET	49982	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.755604982 CET	49982	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.755616903 CET	443	49982	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.811727047 CET	443	49979	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.812232971 CET	49979	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.812264919 CET	443	49979	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.812799931 CET	49979	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.812807083 CET	443	49979	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.813168049 CET	443	49977	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.813584089 CET	49977	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.813600063 CET	443	49977	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.814007044 CET	49977	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.814012051 CET	443	49977	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.856569052 CET	443	49978	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.857176065 CET	49978	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.857206106 CET	443	49978	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.857709885 CET	49978	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.857716084 CET	443	49978	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.875850916 CET	443	49980	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.876440048 CET	49980	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.876466990 CET	443	49980	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.876890898 CET	49980	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.876898050 CET	443	49980	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.956748009 CET	443	49979	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.956824064 CET	443	49979	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.957007885 CET	49979	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.957451105 CET	49979	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.957468033 CET	443	49979	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.957489014 CET	49979	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.957495928 CET	443	49979	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.958204031 CET	443	49977	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.958234072 CET	443	49977	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.958285093 CET	443	49977	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.958297968 CET	49977	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.958338022 CET	49977	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.959887981 CET	49977	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.959893942 CET	443	49977	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.963213921 CET	49983	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.963248014 CET	443	49983	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.963294983 CET	49984	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.963301897 CET	443	49984	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.963334084 CET	49983	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.963381052 CET	49984	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.963469028 CET	49983	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.963480949 CET	443	49983	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:47.963556051 CET	49984	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:47.963562965 CET	443	49984	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.002393007 CET	443	49978	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.002512932 CET	443	49978	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.002793074 CET	49978	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.003284931 CET	49978	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.003310919 CET	443	49978	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.003326893 CET	49978	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.003333092 CET	443	49978	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.006294966 CET	49985	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.006335974 CET	443	49985	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.006408930 CET	49985	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.006731033 CET	49985	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.006745100 CET	443	49985	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.023102999 CET	443	49980	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.023168087 CET	443	49980	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.023281097 CET	49980	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.023629904 CET	49980	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.023629904 CET	49980	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.023648024 CET	443	49980	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.023658037 CET	443	49980	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.026211023 CET	49986	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.026246071 CET	443	49986	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.026380062 CET	49986	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.026541948 CET	49986	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.026555061 CET	443	49986	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.505584955 CET	443	49982	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.506108999 CET	49982	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.506140947 CET	443	49982	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.506705999 CET	49982	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.506711006 CET	443	49982	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.642036915 CET	443	49982	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.642112017 CET	443	49982	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.642218113 CET	49982	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.644416094 CET	49982	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.644416094 CET	49982	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.644438982 CET	443	49982	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.644449949 CET	443	49982	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.647548914 CET	49987	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.647576094 CET	443	49987	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.647767067 CET	49987	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.647934914 CET	49987	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.647941113 CET	443	49987	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.722754002 CET	443	49984	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.723386049 CET	49984	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.723406076 CET	443	49984	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.723897934 CET	49984	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.723903894 CET	443	49984	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.725732088 CET	443	49983	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.726162910 CET	49983	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.726177931 CET	443	49983	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.726629972 CET	49983	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.726634979 CET	443	49983	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.767585039 CET	443	49985	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.768382072 CET	49985	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.768418074 CET	443	49985	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.768764973 CET	49985	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.768770933 CET	443	49985	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.861128092 CET	443	49984	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.861186028 CET	443	49984	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.861228943 CET	443	49984	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.861273050 CET	49984	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.861320972 CET	49984	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.861706018 CET	49984	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.861720085 CET	443	49984	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.861732960 CET	49984	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.861738920 CET	443	49984	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.862555027 CET	443	49983	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.862624884 CET	443	49983	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.862767935 CET	49983	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.862987041 CET	49983	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.862992048 CET	443	49983	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.863002062 CET	49983	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.863007069 CET	443	49983	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.865379095 CET	49988	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.865417957 CET	443	49988	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.865618944 CET	49988	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.865739107 CET	49988	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.865745068 CET	443	49988	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.865844965 CET	49989	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.865881920 CET	443	49989	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.865993023 CET	49989	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.866195917 CET	49989	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.866210938 CET	443	49989	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.891195059 CET	443	49986	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.891715050 CET	49986	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.891748905 CET	443	49986	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.892220974 CET	49986	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.892226934 CET	443	49986	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.906281948 CET	443	49985	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.906341076 CET	443	49985	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.906543970 CET	49985	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.906605005 CET	49985	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.906627893 CET	443	49985	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.906647921 CET	49985	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.906655073 CET	443	49985	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.909679890 CET	49990	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.909720898 CET	443	49990	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:48.909794092 CET	49990	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.910003901 CET	49990	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:48.910016060 CET	443	49990	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.028301954 CET	443	49986	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.028336048 CET	443	49986	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.028390884 CET	443	49986	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.028410912 CET	49986	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.028470039 CET	49986	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.028738022 CET	49986	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.028760910 CET	443	49986	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.028774023 CET	49986	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.028779984 CET	443	49986	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.031872988 CET	49991	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.031922102 CET	443	49991	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.032087088 CET	49991	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.032289982 CET	49991	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.032303095 CET	443	49991	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.418806076 CET	443	49987	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.419414043 CET	49987	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.419441938 CET	443	49987	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.419861078 CET	49987	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.419872046 CET	443	49987	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.559495926 CET	443	49987	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.559578896 CET	443	49987	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.559848070 CET	49987	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.559915066 CET	49987	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.559915066 CET	49987	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.559937954 CET	443	49987	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.559947014 CET	443	49987	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.563076973 CET	49992	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.563114882 CET	443	49992	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.563210964 CET	49992	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.563429117 CET	49992	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.563445091 CET	443	49992	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.621171951 CET	443	49989	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.621731997 CET	49989	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.621766090 CET	443	49989	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.622212887 CET	49989	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.622220039 CET	443	49989	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.635495901 CET	443	49988	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.636059046 CET	49988	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.636080027 CET	443	49988	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.636537075 CET	49988	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.636543036 CET	443	49988	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.650624037 CET	443	49990	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.651106119 CET	49990	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.651124954 CET	443	49990	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.651565075 CET	49990	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.651568890 CET	443	49990	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.759716988 CET	443	49989	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.759808064 CET	443	49989	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.759964943 CET	49989	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.760121107 CET	49989	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.760140896 CET	443	49989	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.760150909 CET	49989	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.760157108 CET	443	49989	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.763736963 CET	49993	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.763773918 CET	443	49993	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.763855934 CET	49993	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.763994932 CET	49993	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.764008045 CET	443	49993	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.775053024 CET	443	49988	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.775083065 CET	443	49988	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.775146961 CET	443	49988	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.775233030 CET	49988	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.775285006 CET	49988	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.775300980 CET	443	49988	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.775316954 CET	49988	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.775321960 CET	443	49988	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.777673006 CET	49994	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.777698994 CET	443	49994	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.777779102 CET	49994	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.777992010 CET	49994	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.778007984 CET	443	49994	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.788178921 CET	443	49990	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.788206100 CET	443	49990	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.788247108 CET	443	49990	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.788266897 CET	49990	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.788319111 CET	49990	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.788537979 CET	49990	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.788542986 CET	443	49990	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.788566113 CET	49990	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.788569927 CET	443	49990	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.791333914 CET	49995	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.791352987 CET	443	49995	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.791445017 CET	49995	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.791564941 CET	49995	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.791574001 CET	443	49995	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.798969984 CET	443	49991	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.799401999 CET	49991	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.799418926 CET	443	49991	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.800065994 CET	49991	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.800071001 CET	443	49991	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.938477993 CET	443	49991	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.938575983 CET	443	49991	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.938790083 CET	49991	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.938915968 CET	49991	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.938935041 CET	443	49991	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.938946009 CET	49991	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.938951969 CET	443	49991	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.942326069 CET	49996	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.942352057 CET	443	49996	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:49.942483902 CET	49996	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.942620039 CET	49996	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:49.942637920 CET	443	49996	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.311638117 CET	443	49992	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.312243938 CET	49992	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.312262058 CET	443	49992	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.312745094 CET	49992	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.312750101 CET	443	49992	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.448849916 CET	443	49992	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.448889971 CET	443	49992	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.448957920 CET	49992	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.448964119 CET	443	49992	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.449181080 CET	49992	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.449285030 CET	49992	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.449285030 CET	49992	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.449301004 CET	443	49992	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.449311018 CET	443	49992	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.452373981 CET	49997	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.452408075 CET	443	49997	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.452513933 CET	49997	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.452634096 CET	49997	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.452647924 CET	443	49997	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.505666018 CET	443	49993	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.506227016 CET	49993	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.506258965 CET	443	49993	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.506982088 CET	49993	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.506988049 CET	443	49993	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.537122965 CET	443	49994	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.537734032 CET	49994	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.537755013 CET	443	49994	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.538692951 CET	49994	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.538700104 CET	443	49994	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.542849064 CET	443	49995	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.543272972 CET	49995	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.543320894 CET	443	49995	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.543737888 CET	49995	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.543749094 CET	443	49995	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.640835047 CET	443	49993	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.640860081 CET	443	49993	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.640923977 CET	443	49993	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.640930891 CET	49993	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.640993118 CET	49993	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.642261982 CET	49993	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.642261982 CET	49993	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.642285109 CET	443	49993	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.642297029 CET	443	49993	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.655939102 CET	49998	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.655968904 CET	443	49998	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.656117916 CET	49998	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.656502008 CET	49998	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.656523943 CET	443	49998	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.678612947 CET	443	49994	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.678643942 CET	443	49994	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.678685904 CET	443	49994	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.678741932 CET	49994	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.679874897 CET	443	49995	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.679934025 CET	443	49995	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.680017948 CET	49995	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.680998087 CET	49994	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.681013107 CET	443	49994	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.681041002 CET	49994	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.681046009 CET	443	49994	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.684386015 CET	49995	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.684397936 CET	443	49995	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.684406996 CET	49995	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.684412956 CET	443	49995	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.688112974 CET	49999	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.688148022 CET	443	49999	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.688220978 CET	49999	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.688433886 CET	49999	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.688462019 CET	443	49999	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.688966990 CET	50000	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.688993931 CET	443	50000	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.689080000 CET	50000	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.689207077 CET	50000	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.689218044 CET	443	50000	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.697979927 CET	443	49996	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.702176094 CET	49996	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.702198982 CET	443	49996	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.702658892 CET	49996	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.702668905 CET	443	49996	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.835026979 CET	443	49996	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.835247040 CET	443	49996	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.835295916 CET	443	49996	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.835330009 CET	49996	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.835359097 CET	49996	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.835571051 CET	49996	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.835587025 CET	443	49996	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.835597038 CET	49996	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.835602999 CET	443	49996	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.838622093 CET	50001	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.838660955 CET	443	50001	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:50.838781118 CET	50001	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.838908911 CET	50001	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:50.838926077 CET	443	50001	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.219412088 CET	443	49997	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.220089912 CET	49997	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.220112085 CET	443	49997	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.220592976 CET	49997	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.220598936 CET	443	49997	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.355892897 CET	443	49997	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.355983019 CET	443	49997	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.356024027 CET	49997	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.356259108 CET	49997	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.356277943 CET	443	49997	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.356292009 CET	49997	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.356297970 CET	443	49997	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.375020981 CET	50002	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.375065088 CET	443	50002	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.375138998 CET	50002	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.375435114 CET	50002	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.375449896 CET	443	50002	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.407033920 CET	443	49998	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.409868956 CET	49998	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.409898043 CET	443	49998	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.410502911 CET	49998	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.410510063 CET	443	49998	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.427541971 CET	443	49999	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.430218935 CET	49999	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.430243969 CET	443	49999	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.430773973 CET	49999	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.430782080 CET	443	49999	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.451493025 CET	443	50000	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.453491926 CET	50000	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.453520060 CET	443	50000	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.453979015 CET	50000	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.453984022 CET	443	50000	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.543075085 CET	443	49998	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.543107986 CET	443	49998	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.543162107 CET	443	49998	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.543246031 CET	49998	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.546890974 CET	49998	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.546890974 CET	49998	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.546911001 CET	443	49998	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.546935081 CET	443	49998	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.558815956 CET	50003	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.558830976 CET	443	50003	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.558912992 CET	50003	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.559144020 CET	50003	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.559158087 CET	443	50003	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.562170982 CET	443	49999	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.562268019 CET	443	49999	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.562382936 CET	49999	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.562609911 CET	49999	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.562628984 CET	443	49999	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.562664032 CET	49999	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.562671900 CET	443	49999	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.566092014 CET	50004	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.566127062 CET	443	50004	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.566246986 CET	50004	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.566382885 CET	50004	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.566404104 CET	443	50004	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.598501921 CET	443	50000	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.598602057 CET	443	50000	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.598649025 CET	443	50000	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.598664999 CET	50000	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.598701000 CET	50000	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.598916054 CET	50000	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.598939896 CET	443	50000	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.598947048 CET	50000	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.598953009 CET	443	50000	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.602675915 CET	50005	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.602709055 CET	443	50005	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.602828026 CET	50005	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.602981091 CET	50005	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.602996111 CET	443	50005	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.620136976 CET	443	50001	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.620645046 CET	50001	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.620662928 CET	443	50001	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.621397972 CET	50001	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.621403933 CET	443	50001	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.762859106 CET	443	50001	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.762960911 CET	443	50001	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.763240099 CET	50001	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.763240099 CET	50001	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.763330936 CET	50001	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.763348103 CET	443	50001	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.766437054 CET	50006	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.766485929 CET	443	50006	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:51.766647100 CET	50006	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.766872883 CET	50006	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:51.766886950 CET	443	50006	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.131186962 CET	443	50002	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.132241964 CET	50002	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.132272959 CET	443	50002	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.132894039 CET	50002	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.132900000 CET	443	50002	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.268995047 CET	443	50002	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.269028902 CET	443	50002	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.269083023 CET	443	50002	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.269133091 CET	50002	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.269272089 CET	50002	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.269576073 CET	50002	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.269576073 CET	50002	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.269598007 CET	443	50002	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.269606113 CET	443	50002	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.273070097 CET	50007	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.273107052 CET	443	50007	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.273437977 CET	50007	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.273437977 CET	50007	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.273472071 CET	443	50007	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.312232018 CET	443	50003	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.312926054 CET	50003	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.312943935 CET	443	50003	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.313473940 CET	50003	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.313481092 CET	443	50003	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.347213030 CET	443	50004	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.347769022 CET	50004	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.347796917 CET	443	50004	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.348336935 CET	50004	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.348344088 CET	443	50004	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.400389910 CET	443	50005	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.401403904 CET	50005	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.401403904 CET	50005	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.401423931 CET	443	50005	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.401433945 CET	443	50005	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.449912071 CET	443	50003	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.449995995 CET	443	50003	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.450254917 CET	50003	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.450254917 CET	50003	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.450290918 CET	50003	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.450304031 CET	443	50003	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.453253031 CET	50008	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.453300953 CET	443	50008	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.453479052 CET	50008	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.453743935 CET	50008	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.453758001 CET	443	50008	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.488502026 CET	443	50004	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.488569021 CET	443	50004	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.488671064 CET	50004	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.489075899 CET	50004	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.489075899 CET	50004	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.489101887 CET	443	50004	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.489115953 CET	443	50004	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.492208958 CET	50009	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.492249966 CET	443	50009	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.492482901 CET	50009	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.492482901 CET	50009	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.492516041 CET	443	50009	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.524818897 CET	443	50006	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.525506973 CET	50006	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.525527954 CET	443	50006	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.525959969 CET	50006	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.525965929 CET	443	50006	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.546885967 CET	443	50005	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.546921968 CET	443	50005	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.546986103 CET	443	50005	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.547009945 CET	50005	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.547051907 CET	50005	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.547333002 CET	50005	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.547333002 CET	50005	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.547349930 CET	443	50005	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.547360897 CET	443	50005	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.550860882 CET	50010	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.550903082 CET	443	50010	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.550995111 CET	50010	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.551274061 CET	50010	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.551287889 CET	443	50010	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.670814037 CET	443	50006	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.670905113 CET	443	50006	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.670979977 CET	50006	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.671194077 CET	50006	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.671216011 CET	443	50006	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.671231985 CET	50006	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.671238899 CET	443	50006	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.675246954 CET	50011	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.675291061 CET	443	50011	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:52.675371885 CET	50011	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.675642014 CET	50011	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:52.675654888 CET	443	50011	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.022250891 CET	443	50007	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.022950888 CET	50007	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.022973061 CET	443	50007	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.023437023 CET	50007	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.023444891 CET	443	50007	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.156661034 CET	443	50007	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.157026052 CET	443	50007	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.157114983 CET	50007	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.157151937 CET	50007	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.157167912 CET	443	50007	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.157233953 CET	50007	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.157241106 CET	443	50007	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.161264896 CET	50012	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.161319017 CET	443	50012	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.161386013 CET	50012	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.161525965 CET	50012	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.161540031 CET	443	50012	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.222471952 CET	443	50008	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.223037958 CET	50008	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.223069906 CET	443	50008	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.223757982 CET	50008	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.223767042 CET	443	50008	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.255331993 CET	443	50009	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.256063938 CET	50009	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.256141901 CET	443	50009	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.256548882 CET	50009	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.256572962 CET	443	50009	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.308248043 CET	443	50010	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.308943033 CET	50010	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.308975935 CET	443	50010	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.309470892 CET	50010	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.309480906 CET	443	50010	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.361517906 CET	443	50008	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.361639023 CET	443	50008	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.361690044 CET	443	50008	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.361710072 CET	50008	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.361777067 CET	50008	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.364124060 CET	50008	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.364124060 CET	50008	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.364162922 CET	443	50008	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.364176989 CET	443	50008	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.367928028 CET	50013	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.367975950 CET	443	50013	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.368129969 CET	50013	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.368284941 CET	50013	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.368290901 CET	443	50013	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.394695044 CET	443	50009	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.394777060 CET	443	50009	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.394833088 CET	50009	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.395016909 CET	50009	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.395041943 CET	443	50009	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.395054102 CET	50009	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.395060062 CET	443	50009	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.398004055 CET	50014	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.398052931 CET	443	50014	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.398211956 CET	50014	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.398358107 CET	50014	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.398363113 CET	443	50014	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.428782940 CET	443	50011	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.429249048 CET	50011	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.429271936 CET	443	50011	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.429822922 CET	50011	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.429828882 CET	443	50011	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.447530985 CET	443	50010	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.447556019 CET	443	50010	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.447607040 CET	443	50010	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.447688103 CET	50010	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.447688103 CET	50010	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.447884083 CET	50010	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.447884083 CET	50010	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.447906971 CET	443	50010	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.447916985 CET	443	50010	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.451169968 CET	50015	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.451209068 CET	443	50015	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.451283932 CET	50015	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.451464891 CET	50015	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.451483965 CET	443	50015	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.568722010 CET	443	50011	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.568929911 CET	443	50011	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.569015026 CET	50011	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.569103003 CET	50011	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.569103003 CET	50011	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.569149017 CET	443	50011	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.569180012 CET	443	50011	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.572318077 CET	50016	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.572364092 CET	443	50016	13.107.253.45	192.168.2.4
Oct 30, 2024 15:52:53.572426081 CET	50016	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.572593927 CET	50016	443	192.168.2.4	13.107.253.45
Oct 30, 2024 15:52:53.572609901 CET	443	50016	13.107.253.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 15:51:29.259896040 CET	53	56614	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:29.378715992 CET	53	53014	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:30.847052097 CET	53	50511	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:33.320070982 CET	55609	53	192.168.2.4	1.1.1.1
Oct 30, 2024 15:51:33.320305109 CET	53058	53	192.168.2.4	1.1.1.1
Oct 30, 2024 15:51:33.327708006 CET	53	55609	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:33.327732086 CET	53	53058	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:33.947973967 CET	49306	53	192.168.2.4	1.1.1.1
Oct 30, 2024 15:51:33.948581934 CET	57192	53	192.168.2.4	1.1.1.1
Oct 30, 2024 15:51:33.955848932 CET	53	49306	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:33.955868006 CET	53	57192	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:35.372241020 CET	138	138	192.168.2.4	192.168.2.255
Oct 30, 2024 15:51:41.080734968 CET	53	61432	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:44.219902039 CET	51163	53	192.168.2.4	1.1.1.1
Oct 30, 2024 15:51:44.220681906 CET	60337	53	192.168.2.4	1.1.1.1
Oct 30, 2024 15:51:44.227081060 CET	53	51163	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:44.228188992 CET	53	60337	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:46.328248978 CET	52505	53	192.168.2.4	1.1.1.1
Oct 30, 2024 15:51:46.328888893 CET	61584	53	192.168.2.4	1.1.1.1
Oct 30, 2024 15:51:46.336375952 CET	53	52505	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:46.336739063 CET	53	61584	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:47.747323990 CET	53	55460	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:48.435642004 CET	53	56091	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:49.374172926 CET	63859	53	192.168.2.4	1.1.1.1
Oct 30, 2024 15:51:49.374643087 CET	63177	53	192.168.2.4	1.1.1.1
Oct 30, 2024 15:51:49.381386042 CET	53	63859	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:49.382323027 CET	53	63177	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:50.523807049 CET	50524	53	192.168.2.4	1.1.1.1
Oct 30, 2024 15:51:50.524128914 CET	55063	53	192.168.2.4	1.1.1.1
Oct 30, 2024 15:51:50.531240940 CET	53	50524	1.1.1.1	192.168.2.4
Oct 30, 2024 15:51:50.531871080 CET	53	55063	1.1.1.1	192.168.2.4
Oct 30, 2024 15:52:07.189176083 CET	53	59143	1.1.1.1	192.168.2.4
Oct 30, 2024 15:52:29.264282942 CET	53	60865	1.1.1.1	192.168.2.4
Oct 30, 2024 15:52:29.614865065 CET	53	64258	1.1.1.1	192.168.2.4
Oct 30, 2024 15:52:46.019471884 CET	53	62337	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 15:51:33.320070982 CET	192.168.2.4	1.1.1.1	0xd864	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:51:33.320305109 CET	192.168.2.4	1.1.1.1	0xd60b	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Oct 30, 2024 15:51:33.947973967 CET	192.168.2.4	1.1.1.1	0x3949	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:51:33.948581934 CET	192.168.2.4	1.1.1.1	0xb24d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 15:51:44.219902039 CET	192.168.2.4	1.1.1.1	0xeb60	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:51:44.220681906 CET	192.168.2.4	1.1.1.1	0x8e26	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Oct 30, 2024 15:51:46.328248978 CET	192.168.2.4	1.1.1.1	0x4aba	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:51:46.328888893 CET	192.168.2.4	1.1.1.1	0xbc55	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 30, 2024 15:51:49.374172926 CET	192.168.2.4	1.1.1.1	0x3aba	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:51:49.374643087 CET	192.168.2.4	1.1.1.1	0x82d4	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 30, 2024 15:51:50.523807049 CET	192.168.2.4	1.1.1.1	0xe0aa	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:51:50.524128914 CET	192.168.2.4	1.1.1.1	0xafb9	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 15:51:33.327708006 CET	1.1.1.1	192.168.2.4	0xd864	No error (0)	drive.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:51:33.955848932 CET	1.1.1.1	192.168.2.4	0x3949	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:51:33.955868006 CET	1.1.1.1	192.168.2.4	0xb24d	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 15:51:35.498564005 CET	1.1.1.1	192.168.2.4	0xb800	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:51:35.498564005 CET	1.1.1.1	192.168.2.4	0xb800	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:51:37.301749945 CET	1.1.1.1	192.168.2.4	0xc403	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 15:51:37.301749945 CET	1.1.1.1	192.168.2.4	0xc403	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:51:44.227081060 CET	1.1.1.1	192.168.2.4	0xeb60	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 15:51:44.227081060 CET	1.1.1.1	192.168.2.4	0xeb60	No error (0)	www3.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:51:44.228188992 CET	1.1.1.1	192.168.2.4	0x8e26	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 15:51:46.336375952 CET	1.1.1.1	192.168.2.4	0x4aba	No error (0)	play.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:51:49.381386042 CET	1.1.1.1	192.168.2.4	0x3aba	No error (0)	play.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:51:49.540566921 CET	1.1.1.1	192.168.2.4	0x694b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 15:51:49.540566921 CET	1.1.1.1	192.168.2.4	0x694b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:51:50.531240940 CET	1.1.1.1	192.168.2.4	0xe0aa	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:51:50.531871080 CET	1.1.1.1	192.168.2.4	0xafb9	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 15:52:03.509804964 CET	1.1.1.1	192.168.2.4	0xe79e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 15:52:03.509804964 CET	1.1.1.1	192.168.2.4	0xe79e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:52:12.321105003 CET	1.1.1.1	192.168.2.4	0x7c25	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 15:52:12.321105003 CET	1.1.1.1	192.168.2.4	0x7c25	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 15:52:12.321105003 CET	1.1.1.1	192.168.2.4	0x7c25	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 30, 2024 15:52:42.858081102 CET	1.1.1.1	192.168.2.4	0x6102	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 15:52:42.858081102 CET	1.1.1.1	192.168.2.4	0x6102	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

drive.google.com

slscr.update.microsoft.com

https:

accounts.youtube.com

play.google.com

www.google.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	172.217.18.14	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:51:34 UTC	877	OUT	GET /drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 14:51:34 UTC	1577	IN	HTTP/1.1 302 Found Content-Type: application/binary Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Location: https://accounts.google.com/ServiceLogin?service=wise&passive=1209600&osid=1&continue=https://drive.google.com/drive/search?usp%3Dmanage_all_todos_url%26q%3Dfollowup:actionitems%26usp_dm%3Dfalse&followup=https://drive.google.com/drive/search?usp%3Dmanage_all_todos_url%26q%3Dfollowup:actionitems%26usp_dm%3Dfalse P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Report-To: {"group":"coop_drive-web-frontend","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/drive-web-frontend"}]} Content-Security-Policy: script-src 'report-sample' 'nonce-UUHwpYeKyHijkBpxjXYG5g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/drive/prod Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="coop_drive-web-frontend" Date: Wed, 30 Oct 2024 14:51:34 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: NID=518=aa4HzfNqmuzxpQdlwBEsKa_qSxYHzN0tu4t92MehAERQG_cW8HcLIA9-A0SSrbaI8BgfsbRHBzwapwfdaEPFFF55OxeDKRhjTEpCPXgpsPv5U6zGQUTMMzpjTCB9VegnoMKUYMqvVG0Oot9RB9AOyHiC2Pxsc8BiJoOAJEyztrgTBJM8pGI; expires=Thu, 01-May-2025 14:51:34 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:51:36 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yAhylLOZ2rE4Wex&MD=peprnk7f HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-30 14:51:36 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 87e53032-e1e0-4d37-becf-3594babbdd9f MS-RequestId: 83265f29-f0ff-4ca7-93bb-27b0fe30ff7a MS-CV: OsOw8Bztgki5K4K4.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 30 Oct 2024 14:51:35 GMT Connection: close Content-Length: 24490
2024-10-30 14:51:36 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-30 14:51:36 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49775	216.58.206.78	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:51:45 UTC	1245	OUT	GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1074275128&timestamp=1730299903022 HTTP/1.1 Host: accounts.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 14:51:45 UTC	1967	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://accounts.google.com Content-Security-Policy: frame-ancestors https://accounts.google.com Content-Security-Policy: script-src 'report-sample' 'nonce-SnLixn5XP8bDG5gXDgrF8Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 14:51:45 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/AccountsDomainCookiesCheckConnectionHttp/web-reports?context=eJzjstDikmJw15BikPj6kkkNiJ3SZ7AGAHHSv_OsBUB8ufsS63UgVu25xGoMxEUSV1gbgFiIm6NxQudONoEdFw_XKOkl5RfGZ6ak5pVkllSm5OcmZuYl5-dnZ6YWF6cWlaUWxRsZGJkYGhgZ6BlYxBcYAACWQyy0" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 14:51:45 UTC	1967	IN	Data Raw: 37 35 62 37 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 53 6e 4c 69 78 6e 35 58 50 38 62 44 47 35 67 58 44 67 72 46 38 51 22 3e 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f Data Ascii: 75b7<html><head><script nonce="SnLixn5XP8bDG5gXDgrF8Q">"use strict";this.default_AccountsDomaincookiesCheckconnectionJs=this.default_AccountsDomaincookiesCheckconnectionJs\|\|{};(function(_){var window=this;try{_._F_toggles_initialize=function(a){(typeo
2024-10-30 14:51:45 UTC	1967	IN	Data Raw: 2f 54 72 69 64 65 6e 74 5c 2f 28 5c 64 2e 5c 64 29 2f 2e 65 78 65 63 28 62 29 2c 0a 63 5b 31 5d 3d 3d 22 37 2e 30 22 29 69 66 28 62 26 26 62 5b 31 5d 29 73 77 69 74 63 68 28 62 5b 31 5d 29 7b 63 61 73 65 20 22 34 2e 30 22 3a 61 3d 22 38 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 35 2e 30 22 3a 61 3d 22 39 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 36 2e 30 22 3a 61 3d 22 31 30 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 37 2e 30 22 3a 61 3d 22 31 31 2e 30 22 7d 65 6c 73 65 20 61 3d 22 37 2e 30 22 3b 65 6c 73 65 20 61 3d 63 5b 31 5d 3b 62 3d 61 7d 65 6c 73 65 20 62 3d 22 22 3b 72 65 74 75 72 6e 20 62 7d 76 61 72 20 64 3d 52 65 67 45 78 70 28 22 28 5b 41 2d 5a 5d 5b 5c 5c 77 20 5d 2b 29 2f 28 5b 5e 5c 5c 73 5d 2b 29 5c 5c 73 2a 28 3f 3a 5c 5c Data Ascii: /Trident\/(\d.\d)/.exec(b),c[1]=="7.0")if(b&&b[1])switch(b[1]){case "4.0":a="8.0";break;case "5.0":a="9.0";break;case "6.0":a="10.0";break;case "7.0":a="11.0"}else a="7.0";else a=c[1];b=a}else b="";return b}var d=RegExp("([A-Z][\\w ]+)/([^\\s]+)\\s*(?:\\
2024-10-30 14:51:45 UTC	1967	IN	Data Raw: 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 69 67 69 6e 74 22 3a 72 65 74 75 72 6e 28 41 61 3f 0a 61 3e 3d 42 61 26 26 61 3c 3d 43 61 3a 61 5b 30 5d 3d 3d 3d 22 2d 22 3f 75 61 28 61 2c 44 61 29 3a 75 61 28 61 2c 45 61 29 29 3f 4e 75 6d 62 65 72 28 61 29 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 69 66 28 43 28 61 29 29 72 65 74 75 72 6e 7d 65 6c 73 65 20 69 66 28 46 61 26 26 61 21 3d 6e 75 6c 6c 26 26 61 Data Ascii: switch(typeof a){case "number":return isFinite(a)?a:String(a);case "bigint":return(Aa?a>=Ba&&a<=Ca:a[0]==="-"?ua(a,Da):ua(a,Ea))?Number(a):String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(C(a))return}else if(Fa&&a!=null&&a
2024-10-30 14:51:45 UTC	1967	IN	Data Raw: 6f 6e 28 61 29 7b 76 61 72 20 62 3b 69 66 28 61 26 26 28 62 3d 51 61 29 21 3d 6e 75 6c 6c 26 26 62 2e 68 61 73 28 61 29 26 26 28 62 3d 61 2e 43 29 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 69 66 28 63 3d 3d 3d 62 2e 6c 65 6e 67 74 68 2d 31 26 26 41 28 64 29 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 7b 76 61 72 20 66 3d 64 5b 65 5d 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 66 29 26 26 0a 52 61 28 66 2c 61 29 7d 65 6c 73 65 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 64 29 26 26 52 61 28 64 2c 61 29 7d 61 3d 45 3f 61 2e 43 3a 4d 61 28 61 2e 43 2c 50 61 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 31 29 3b 65 3d 21 45 3b 69 66 28 62 3d 61 2e 6c 65 6e 67 74 68 29 7b 64 Data Ascii: on(a){var b;if(a&&(b=Qa)!=null&&b.has(a)&&(b=a.C))for(var c=0;c<b.length;c++){var d=b[c];if(c===b.length-1&&A(d))for(var e in d){var f=d[e];Array.isArray(f)&&Ra(f,a)}else Array.isArray(d)&&Ra(d,a)}a=E?a.C:Ma(a.C,Pa,void 0,void 0,!1);e=!E;if(b=a.length){d
2024-10-30 14:51:45 UTC	1967	IN	Data Raw: 47 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 63 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 57 61 5b 62 5b 63 5d 5d 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e Data Ascii: G("Symbol.iterator",function(a){if(a)return a;a=Symbol("c");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=Wa[b[c]];typeof d==="function
2024-10-30 14:51:45 UTC	1967	IN	Data Raw: 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 65 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 2e 67 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6b 29 7b 6b 3d 48 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 63 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6c 22 29 3b 64 28 6b 29 3b 69 66 Data Ascii: h.random();e("freeze");e("preventExtensions");e("seal");var h=0,g=function(k){this.g=(h+=Math.random()+1).toString();if(k){k=H(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};g.prototype.set=function(k,l){if(!c(k))throw Error("l");d(k);if
2024-10-30 14:51:45 UTC	1967	IN	Data Raw: 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 6f Data Ascii: tion(g){return g.value})};c.prototype.forEach=function(g,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};c.prototype[Symbol.iterator]=c.prototype.entries;var d=function(g,k){var l=k&&typeof k;l=="object"\|\|l=="functio
2024-10-30 14:51:45 UTC	1967	IN	Data Raw: 69 73 4e 61 4e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 69 73 4e 61 4e 28 62 29 7d 7d 29 3b 76 61 72 20 66 62 3d 66 62 7c 7c 7b 7d 2c 71 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 67 62 3d 71 2e 5f 46 5f 74 6f 67 67 6c 65 73 7c 7c 5b 5d 2c 68 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 71 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 69 62 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 4d 61 74 Data Ascii: isNaN",function(a){return a?a:function(b){return typeof b==="number"&&isNaN(b)}});var fb=fb\|\|{},q=this\|\|self,gb=q._F_toggles\|\|[],hb=function(a){a=a.split(".");for(var b=q,c=0;c<a.length;c++)if(b=b[a[c]],b==null)return null;return b},ib="closure_uid_"+(Mat
2024-10-30 14:51:45 UTC	1967	IN	Data Raw: 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 3d 7b 7d 29 3b 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 2e 73 65 76 65 72 69 74 79 3d 62 7d 3b 76 61 72 20 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 3d 63 7c 7c 71 3b 76 61 72 20 64 3d 63 2e 6f 6e 65 72 72 6f 72 2c 65 3d 21 21 62 3b 63 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 2c 67 2c 6b 2c 6c 29 7b 64 26 26 64 28 66 2c 68 2c 67 2c 6b 2c 6c 29 3b 61 28 7b 6d 65 73 73 61 67 65 3a 66 2c 66 69 6c 65 4e 61 6d 65 3a 68 2c 6c 69 6e 65 3a 67 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 67 2c 62 61 3a 6b 2c 65 72 72 6f 72 3a 6c 7d 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 74 62 3d 66 75 6e 63 Data Ascii: ure__error__context__984382={});a.__closure__error__context__984382.severity=b};var qb=function(a,b,c){c=c\|\|q;var d=c.onerror,e=!!b;c.onerror=function(f,h,g,k,l){d&&d(f,h,g,k,l);a({message:f,fileName:h,line:g,lineNumber:g,ba:k,error:l});return e}},tb=func
2024-10-30 14:51:45 UTC	1967	IN	Data Raw: 6d 65 6e 74 73 2e 63 61 6c 6c 65 65 2e 63 61 6c 6c 65 72 2c 5b 5d 29 29 3b 72 65 74 75 72 6e 20 62 7d 2c 77 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 69 66 28 61 61 28 62 2c 61 29 3e 3d 30 29 63 2e 70 75 73 68 28 22 5b 2e 2e 2e 63 69 72 63 75 6c 61 72 20 72 65 66 65 72 65 6e 63 65 2e 2e 2e 5d 22 29 3b 65 6c 73 65 20 69 66 28 61 26 26 62 2e 6c 65 6e 67 74 68 3c 0a 35 30 29 7b 63 2e 70 75 73 68 28 73 62 28 61 29 2b 22 28 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 61 2e 61 72 67 75 6d 65 6e 74 73 2c 65 3d 30 3b 64 26 26 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 65 3e 30 26 26 63 2e 70 75 73 68 28 22 2c 20 22 29 3b 76 61 72 20 66 3d 64 5b 65 5d 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 66 29 7b 63 61 73 65 20 22 6f 62 6a Data Ascii: ments.callee.caller,[]));return b},wb=function(a,b){var c=[];if(aa(b,a)>=0)c.push("[...circular reference...]");else if(a&&b.length<50){c.push(sb(a)+"(");for(var d=a.arguments,e=0;d&&e<d.length;e++){e>0&&c.push(", ");var f=d[e];switch(typeof f){case "obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49779	142.250.74.206	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:51:47 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 14:51:47 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 14:51:47 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49780	142.250.74.206	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:51:47 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 14:51:47 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 14:51:47 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49787	142.250.74.206	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:51:48 UTC	1329	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 493 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=aa4HzfNqmuzxpQdlwBEsKa_qSxYHzN0tu4t92MehAERQG_cW8HcLIA9-A0SSrbaI8BgfsbRHBzwapwfdaEPFFF55OxeDKRhjTEpCPXgpsPv5U6zGQUTMMzpjTCB9VegnoMKUYMqvVG0Oot9RB9AOyHiC2Pxsc8BiJoOAJEyztrgTBJM8pGI
2024-10-30 14:51:48 UTC	493	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 33 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 30 32 39 39 39 30 34 37 30 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"33",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1730299904702",null,null,n
2024-10-30 14:51:49 UTC	941	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=jskKzOmilUTZ5GYODwPO3Njn1H6eZI0SUUTYLovhsKvCCadHop0VyP-CwEi7tqvY0ObS6fXmQkX1oGFAhb6Yu8fPpEIf1UnAxxvwDKuCJTDe_DmElvtozj4vbtJk2h732Wg3ToKwQaf6dh23K6yV5BSCe83ABX8eZV1e-Dx39W9nOz95Prt8jE3JHSw; expires=Thu, 01-May-2025 14:51:49 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 14:51:49 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 30 Oct 2024 14:51:49 GMT Connection: close Transfer-Encoding: chunked
2024-10-30 14:51:49 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 14:51:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49790	142.250.74.206	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:51:48 UTC	1329	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 505 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=aa4HzfNqmuzxpQdlwBEsKa_qSxYHzN0tu4t92MehAERQG_cW8HcLIA9-A0SSrbaI8BgfsbRHBzwapwfdaEPFFF55OxeDKRhjTEpCPXgpsPv5U6zGQUTMMzpjTCB9VegnoMKUYMqvVG0Oot9RB9AOyHiC2Pxsc8BiJoOAJEyztrgTBJM8pGI
2024-10-30 14:51:48 UTC	505	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 33 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 30 32 39 39 39 30 35 31 33 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"33",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1730299905139",null,null,n
2024-10-30 14:51:49 UTC	941	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=JWibhpWxGkn00EGuM704BIdzAkBc46PbYA9anPZ4l0nWyrXAkhR9Kxb_cLVJFgecaS6uIcfU2iS3CzYPR4RAlJ3_E2XwjzaqsrztpRIlzqss9xFuLsdARi9iKFQYIEDA0pVZ_cCyTnadmJwPGAl_k6H5PXbBWryxLErVh-DF-0lehcOqo2jGIPgeI5M; expires=Thu, 01-May-2025 14:51:49 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 14:51:49 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 30 Oct 2024 14:51:49 GMT Connection: close Transfer-Encoding: chunked
2024-10-30 14:51:49 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 14:51:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49795	142.250.185.142	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:51:50 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=jskKzOmilUTZ5GYODwPO3Njn1H6eZI0SUUTYLovhsKvCCadHop0VyP-CwEi7tqvY0ObS6fXmQkX1oGFAhb6Yu8fPpEIf1UnAxxvwDKuCJTDe_DmElvtozj4vbtJk2h732Wg3ToKwQaf6dh23K6yV5BSCe83ABX8eZV1e-Dx39W9nOz95Prt8jE3JHSw
2024-10-30 14:51:50 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 14:51:50 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 14:51:50 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 14:51:50 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49793	142.250.185.100	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:51:50 UTC	1230	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=jskKzOmilUTZ5GYODwPO3Njn1H6eZI0SUUTYLovhsKvCCadHop0VyP-CwEi7tqvY0ObS6fXmQkX1oGFAhb6Yu8fPpEIf1UnAxxvwDKuCJTDe_DmElvtozj4vbtJk2h732Wg3ToKwQaf6dh23K6yV5BSCe83ABX8eZV1e-Dx39W9nOz95Prt8jE3JHSw
2024-10-30 14:51:50 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 13:58:17 GMT Expires: Thu, 07 Nov 2024 13:58:17 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 3213 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 14:51:50 UTC	673	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-10-30 14:51:50 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv
2024-10-30 14:51:50 UTC	1378	IN	Data Raw: a8 34 ff 53 a8 34 ff 53 a8 34 ff 56 a9 37 ff b1 d2 9b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff Data Ascii: 4S4S4V7S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{d
2024-10-30 14:51:50 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBBF!4I
2024-10-30 14:51:50 UTC	623	IN	Data Raw: 00 00 00 fe fe fe 26 fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: &$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49796	142.250.185.142	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:51:51 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=JWibhpWxGkn00EGuM704BIdzAkBc46PbYA9anPZ4l0nWyrXAkhR9Kxb_cLVJFgecaS6uIcfU2iS3CzYPR4RAlJ3_E2XwjzaqsrztpRIlzqss9xFuLsdARi9iKFQYIEDA0pVZ_cCyTnadmJwPGAl_k6H5PXbBWryxLErVh-DF-0lehcOqo2jGIPgeI5M
2024-10-30 14:51:51 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 14:51:51 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 14:51:51 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 14:51:51 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49797	142.250.186.132	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:51:51 UTC	651	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=JWibhpWxGkn00EGuM704BIdzAkBc46PbYA9anPZ4l0nWyrXAkhR9Kxb_cLVJFgecaS6uIcfU2iS3CzYPR4RAlJ3_E2XwjzaqsrztpRIlzqss9xFuLsdARi9iKFQYIEDA0pVZ_cCyTnadmJwPGAl_k6H5PXbBWryxLErVh-DF-0lehcOqo2jGIPgeI5M
2024-10-30 14:51:51 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 14:01:18 GMT Expires: Thu, 07 Nov 2024 14:01:18 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 3033 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 14:51:51 UTC	673	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-10-30 14:51:51 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv
2024-10-30 14:51:51 UTC	1378	IN	Data Raw: a8 34 ff 53 a8 34 ff 53 a8 34 ff 56 a9 37 ff b1 d2 9b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff Data Ascii: 4S4S4V7S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{d
2024-10-30 14:51:51 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBBF!4I
2024-10-30 14:51:51 UTC	623	IN	Data Raw: 00 00 00 fe fe fe 26 fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: &$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49798	142.250.74.206	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:51:53 UTC	1315	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1224 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=JWibhpWxGkn00EGuM704BIdzAkBc46PbYA9anPZ4l0nWyrXAkhR9Kxb_cLVJFgecaS6uIcfU2iS3CzYPR4RAlJ3_E2XwjzaqsrztpRIlzqss9xFuLsdARi9iKFQYIEDA0pVZ_cCyTnadmJwPGAl_k6H5PXbBWryxLErVh-DF-0lehcOqo2jGIPgeI5M
2024-10-30 14:51:53 UTC	1224	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 35 38 2c 5b 5b 22 31 37 33 30 32 39 39 39 30 31 30 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],558,[["1730299901000",null,null,nu
2024-10-30 14:51:54 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 14:51:54 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 14:51:54 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 14:51:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49799	142.250.185.142	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:51:55 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=JWibhpWxGkn00EGuM704BIdzAkBc46PbYA9anPZ4l0nWyrXAkhR9Kxb_cLVJFgecaS6uIcfU2iS3CzYPR4RAlJ3_E2XwjzaqsrztpRIlzqss9xFuLsdARi9iKFQYIEDA0pVZ_cCyTnadmJwPGAl_k6H5PXbBWryxLErVh-DF-0lehcOqo2jGIPgeI5M
2024-10-30 14:51:55 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 14:51:55 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 14:51:55 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 14:51:55 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49800	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:13 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:13 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:13 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: 174434da-801e-0015-686a-29f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145213Z-17fbfdc98bbgm62892kdp1w198000000079g0000000051dm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:13 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-30 14:52:13 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-30 14:52:13 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-30 14:52:13 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-30 14:52:13 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-30 14:52:13 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-30 14:52:13 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-30 14:52:13 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-30 14:52:13 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-30 14:52:13 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49804	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:14 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:14 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c4ab37c7-901e-002a-3417-267a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145214Z-17fbfdc98bb2rxf2hfvcfz54000000000660000000002spn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:14 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49801	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:14 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:14 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 8f1f3dd8-601e-0097-4789-28f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145214Z-r1755647c66hxv26qums8q8fsw00000006d0000000001600 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:14 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49803	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:14 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:14 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1a9c8bfd-301e-0000-1fee-25eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145214Z-17fbfdc98bbp77nqf5g2c5aavs00000007ug000000004s87 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:14 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49802	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:14 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:14 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 85f3058c-201e-00aa-6c2c-283928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145214Z-r1755647c666s72wx0z5rz6s60000000099g000000002y3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:14 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49805	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:14 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:14 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 7920d540-e01e-0085-1f11-29c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145214Z-17fbfdc98bb7jfvg3dxcbz5xm000000006f0000000005vex x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:14 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49806	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:14 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=yAhylLOZ2rE4Wex&MD=peprnk7f HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-30 14:52:15 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 50acd974-1558-4694-a5dc-163924ebebda MS-RequestId: 446b727d-c0a1-4d26-8b36-5ebb4a4f287b MS-CV: beIDIQ1z7UaGywP7.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 30 Oct 2024 14:52:14 GMT Connection: close Content-Length: 30005
2024-10-30 14:52:15 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-30 14:52:15 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49808	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:15 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:15 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1f7bc680-101e-0065-6904-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145215Z-17fbfdc98bbt5dtr27n1qp1eqc00000008fg000000001cna x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:15 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49811	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:15 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:15 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 293ba476-701e-000d-0aff-296de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145215Z-r1755647c66x2fg5vpbex0bd8400000009kg000000007kd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:15 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49810	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:15 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145215Z-17fbfdc98bb2cvg4m0cmab3ecw00000006v0000000006vsb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49809	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:15 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:15 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1041074d-101e-0034-30b5-2596ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145215Z-r1755647c66tsn7nz9wda692z000000006n00000000021qu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:15 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49807	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:15 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:15 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: bbf1142f-f01e-0085-589b-2788ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145215Z-r1755647c66pzcrw3ktqe96x2s00000009hg000000000fe0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:15 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49812	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:16 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:16 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: f66eff46-601e-0084-3c9d-276b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145216Z-17fbfdc98bbnsg5pw6rasm3q8s00000008m0000000004w34 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:16 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49816	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:16 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:16 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: abb1733e-f01e-005d-6a3c-2813ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145216Z-17fbfdc98bbh7l5skzh3rekksc00000009n0000000002h7d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:16 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49813	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:16 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9985b9b7-a01e-0021-5827-28814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145216Z-r1755647c66hlhp26bqv22ant4000000089g0000000078at x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49814	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:16 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: f6d6c722-a01e-00ab-371c-289106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145216Z-17fbfdc98bbnsg5pw6rasm3q8s00000008mg000000004evn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49815	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:16 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: b526e42e-401e-005b-10a3-269c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145216Z-17fbfdc98bblzxqcphe71tp4qw00000003e0000000008u92 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49817	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:17 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 77b1f39f-101e-0079-106b-275913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145217Z-17fbfdc98bb2rxf2hfvcfz5400000000061g000000006pyt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:17 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49821	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:17 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:17 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:17 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: bb58e6ef-e01e-000c-4187-288e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145217Z-r1755647c66ldhdjeavapf4fd0000000089g0000000022f3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:17 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49818	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:17 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145217Z-17fbfdc98bb6kklk3r0qwaavtw000000062g000000006szw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:17 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49820	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:17 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:17 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145217Z-r1755647c66hpt4fmfneq8rup800000005cg000000005m2p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:17 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49819	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:17 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:17 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 898be286-601e-003d-2804-276f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145217Z-17fbfdc98bb5d4fn785en176rg000000084g00000000760p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:17 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49822	142.250.74.206	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:18 UTC	1337	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 562 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=JWibhpWxGkn00EGuM704BIdzAkBc46PbYA9anPZ4l0nWyrXAkhR9Kxb_cLVJFgecaS6uIcfU2iS3CzYPR4RAlJ3_E2XwjzaqsrztpRIlzqss9xFuLsdARi9iKFQYIEDA0pVZ_cCyTnadmJwPGAl_k6H5PXbBWryxLErVh-DF-0lehcOqo2jGIPgeI5M
2024-10-30 14:52:18 UTC	562	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 33 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 30 32 39 39 39 33 35 38 30 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"33",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1730299935809",null,null,n
2024-10-30 14:52:18 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 14:52:18 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 14:52:18 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 14:52:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49825	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:18 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:18 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: faf669f2-101e-0065-23a4-264088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145218Z-r1755647c668lcmr2va34xxa5s00000006wg0000000040ga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:18 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49823	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:18 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bfc21b6c-401e-0067-2636-2809c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145218Z-17fbfdc98bbbnx4ldgze4de5zs00000006t0000000004uxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49826	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:18 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145218Z-17fbfdc98bbz4mxcabnudsmquw0000000780000000003p5d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49824	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:18 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 338c7fbe-d01e-0028-7d3c-287896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145218Z-17fbfdc98bb2rxf2hfvcfz54000000000670000000001c5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49827	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:18 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:18 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145218Z-r1755647c668lcmr2va34xxa5s00000006yg0000000008m9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:18 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49828	142.250.74.206	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:18 UTC	1297	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 988 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=JWibhpWxGkn00EGuM704BIdzAkBc46PbYA9anPZ4l0nWyrXAkhR9Kxb_cLVJFgecaS6uIcfU2iS3CzYPR4RAlJ3_E2XwjzaqsrztpRIlzqss9xFuLsdARi9iKFQYIEDA0pVZ_cCyTnadmJwPGAl_k6H5PXbBWryxLErVh-DF-0lehcOqo2jGIPgeI5M
2024-10-30 14:52:18 UTC	988	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 64 65 6e 74 69 74 79 66 72 6f 6e 74 65 6e 64 61 75 74 68 75 69 73 65 72 76 65 72 5f 32 30 32 34 31 30 32 37 2e 30 38 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_identityfrontendauthuiserver_20241027.08_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,
2024-10-30 14:52:19 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 14:52:19 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 14:52:19 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 14:52:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49829	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:19 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:19 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 789f6287-101e-0065-355f-284088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145219Z-17fbfdc98bb9xxzfyggrfrbqmw00000007bg00000000887z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:19 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49830	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:19 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145219Z-17fbfdc98bb7jfvg3dxcbz5xm000000006dg000000006a6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49832	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:19 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:19 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 08308beb-701e-001e-43b0-26f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145219Z-17fbfdc98bbbnx4ldgze4de5zs00000006qg0000000079s3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:19 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49831	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:19 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 346ac1b5-f01e-003f-6ed5-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145219Z-r1755647c66ldhdjeavapf4fd0000000087g000000005u6s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49833	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:19 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:19 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: ae9ca414-101e-008d-470d-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145219Z-17fbfdc98bb9xxzfyggrfrbqmw00000007dg000000006pnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:20 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49834	142.250.185.142	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:20 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=JWibhpWxGkn00EGuM704BIdzAkBc46PbYA9anPZ4l0nWyrXAkhR9Kxb_cLVJFgecaS6uIcfU2iS3CzYPR4RAlJ3_E2XwjzaqsrztpRIlzqss9xFuLsdARi9iKFQYIEDA0pVZ_cCyTnadmJwPGAl_k6H5PXbBWryxLErVh-DF-0lehcOqo2jGIPgeI5M
2024-10-30 14:52:20 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 14:52:20 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 14:52:20 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 14:52:20 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49835	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:20 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:20 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 8e3eac93-d01e-0017-759c-27b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145220Z-r1755647c66hbclz9tgqkaxg2w00000009q0000000007a8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:20 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49836	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:20 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: cbc8156d-001e-0079-70f5-2512e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145220Z-r1755647c66mmrln9nsykf75u80000000770000000006te6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49837	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:20 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: b953619b-001e-0017-7a89-280c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145220Z-r1755647c66vpf8fnbgmzm21hs000000095g000000003pv6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49838	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:20 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:20 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145220Z-17fbfdc98bbfmg5wrf1ctcuuun00000008p0000000001w7n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:20 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49839	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:20 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:20 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145220Z-r1755647c66hxv26qums8q8fsw0000000660000000008m6q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:20 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49840	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:21 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:21 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145221Z-r1755647c66hlhp26bqv22ant4000000087g000000008kf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:21 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49841	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:21 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:21 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2ee95feb-501e-0029-5d17-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145221Z-17fbfdc98bb9xxzfyggrfrbqmw00000007g0000000004wax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:21 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49842	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:21 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: ca0e8e6b-b01e-00ab-6a67-28dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145221Z-17fbfdc98bb2cvg4m0cmab3ecw00000006vg0000000068mh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49843	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:21 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:21 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e7cc90bd-401e-0029-032a-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145221Z-17fbfdc98bb2cvg4m0cmab3ecw00000006z00000000033sw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:21 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49844	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:21 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:21 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 2399187d-801e-008f-5f67-282c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145221Z-17fbfdc98bbbnx4ldgze4de5zs00000006w0000000001yye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:21 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49849	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:22 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:22 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145222Z-17fbfdc98bbx59j5xd9kpbrs8400000007hg000000007vkv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:22 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49846	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:22 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:22 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c417f1b6-b01e-0084-279b-27d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145222Z-r1755647c66p58nm9wqx75pnms00000007fg000000000pfx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:22 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49848	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:22 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:22 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b19a9190-b01e-00ab-7309-28dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145222Z-17fbfdc98bbx59j5xd9kpbrs8400000007m000000000791a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:22 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49847	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:22 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:22 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 2125f972-501e-0035-10a3-26c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145222Z-r1755647c66mrgwz6d897uymaw0000000230000000004w5q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:22 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49845	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:22 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:22 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145222Z-17fbfdc98bbsw6nnfh43fuwvyn00000006ag000000004w1p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:22 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49850	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:23 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:23 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 18fe904c-c01e-00a1-4257-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145223Z-r1755647c66hlhp26bqv22ant400000008dg000000001z7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:23 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49851	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:23 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:23 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:23 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 64bb7fc7-f01e-0071-5d6f-28431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145223Z-r1755647c66ljccje5cnds62nc00000006z0000000004v3b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:23 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49854	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:23 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:23 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:23 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145223Z-17fbfdc98bb2xwflv0w9dps90c0000000940000000001mq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:23 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49852	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:23 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:23 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:23 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 0697abc8-001e-00ad-714f-28554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145223Z-r1755647c66x7vzx9armv8e3cw00000009x0000000002svd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:23 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49853	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:23 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 86dc56c9-201e-00aa-5987-283928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145223Z-r1755647c666sbmsukk894ba7n000000061g0000000005cg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49855	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:24 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:24 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: a8de1b79-001e-0017-5ba3-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145224Z-r1755647c66kcsqh9hy6eyp6kw00000006bg0000000061e2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49856	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:24 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:24 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145224Z-17fbfdc98bbjwdgn5g1mr5hcxn000000064g0000000032dw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:24 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49857	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:24 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 14f65908-801e-008f-32d6-202c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145224Z-r1755647c666s72wx0z5rz6s6000000009b0000000000b70 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49858	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:24 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:24 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 962e216e-b01e-0070-5bcb-261cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145224Z-17fbfdc98bblzxqcphe71tp4qw00000003hg000000005pud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:24 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49859	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:24 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:24 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145224Z-r1755647c66w6f6b5182nn0u0400000006pg000000005324 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:24 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49860	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:25 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:25 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 7a23be84-101e-0079-6389-285913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145225Z-17fbfdc98bbjwdgn5g1mr5hcxn00000005z00000000081wt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:25 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49861	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:25 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:25 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: ab84cae0-f01e-005d-23d7-2513ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145225Z-r1755647c666qwwlm3r555dyqc00000008cg000000005v8d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:25 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49862	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:25 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:25 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 18df47ae-c01e-00a1-2249-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145225Z-17fbfdc98bbnsg5pw6rasm3q8s00000008fg000000008uyd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:25 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49863	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:25 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:25 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: ca6c0e2f-901e-008f-5413-2667a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145225Z-17fbfdc98bbwmxz5amc6q625w0000000042g000000007aww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:25 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49864	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:25 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:25 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 4e972348-801e-00ac-276d-28fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145225Z-r1755647c66hlhp26bqv22ant4000000087g000000008knh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:25 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49865	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:26 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:26 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 481bd859-201e-00aa-219c-273928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145226Z-17fbfdc98bb5d4fn785en176rg00000008ag000000000ex7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:26 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49866	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:26 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:26 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2e5beeba-d01e-002b-6c67-2825fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145226Z-r1755647c666qwwlm3r555dyqc000000088g000000009gz0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:26 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49867	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:26 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:26 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 5ef35a72-501e-007b-6836-285ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145226Z-17fbfdc98bbgm62892kdp1w19800000007b0000000002uad x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:26 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49869	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:26 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:26 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 321a447c-801e-002a-4da3-2631dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145226Z-17fbfdc98bbtf4jxpev5grnmyw00000008eg000000000qgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:26 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49868	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:26 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:26 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 04de2316-001e-0082-3987-285880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145226Z-17fbfdc98bb2cvg4m0cmab3ecw0000000700000000001qye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:26 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49871	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:27 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:27 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 0f0be25c-301e-006e-4493-28f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145227Z-17fbfdc98bbgm62892kdp1w19800000007d00000000002q4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:27 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49870	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:27 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 6c7958f7-701e-001e-113a-29f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145227Z-17fbfdc98bbz4mxcabnudsmquw000000079g000000001334 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49872	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:27 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:27 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8e6218f7-d01e-0066-7d57-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145227Z-17fbfdc98bbp77nqf5g2c5aavs00000007tg000000005r1z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:27 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49873	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:27 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 75e7650a-001e-0079-12c4-2612e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145227Z-r1755647c666sbmsukk894ba7n00000005zg0000000035h4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49874	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:27 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:27 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: b8f0a3b1-001e-0017-5067-280c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145227Z-17fbfdc98bb6vp4m3kc0kte9cs00000008zg000000004tss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:27 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49875	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:28 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 44c43cee-601e-003e-459c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145228Z-17fbfdc98bb7jfvg3dxcbz5xm000000006gg000000004739 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49877	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:28 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:28 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145228Z-17fbfdc98bbgnnfwq36myy7z0g00000008v0000000002xud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:28 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49876	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:28 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dc27e692-e01e-001f-1e67-281633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145228Z-17fbfdc98bblzxqcphe71tp4qw00000003m0000000003z2k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49878	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:28 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:28 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: e0a2f103-c01e-007a-3367-28b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145228Z-17fbfdc98bb8mkvjfkt54wa538000000064g0000000058q5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:28 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49879	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:28 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:28 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 071448c9-d01e-0028-2702-297896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145228Z-r1755647c66p58nm9wqx75pnms0000000790000000008k35 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:28 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49880	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:28 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:29 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:28 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: ba33cc4f-e01e-0052-2e6f-28d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145228Z-r1755647c66vkwr5neys93e0h400000007pg000000007axa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:29 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49881	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:28 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:29 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:29 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c6fd9367-401e-008c-7f80-2686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145229Z-r1755647c66ss75qkr31zpy1kc00000007u0000000005yxw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:29 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49882	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:28 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:28 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: d08917dd-901e-0064-7ab2-26e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145228Z-r1755647c66z67vn9nc21z11a800000007h0000000006ztt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:29 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49883	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:29 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:29 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:29 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: c21b0bdf-c01e-008e-186f-287381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145229Z-r1755647c66mrgwz6d897uymaw00000001zg000000007h40 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:29 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49884	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:29 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:29 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:29 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: d72005e7-a01e-0002-1a61-285074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145229Z-r1755647c66f4bf880huw27dwc00000009n00000000026wm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:29 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49887	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:30 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:30 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145230Z-r1755647c66trqwgqbys9wk81g00000006q0000000007bcv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:30 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49888	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:30 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:30 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145230Z-r1755647c66vpf8fnbgmzm21hs0000000960000000002z20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:30 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49886	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:30 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:30 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:30 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 1515cbe5-b01e-0084-6467-28d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145230Z-17fbfdc98bb8mkvjfkt54wa538000000067g000000001g1n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:30 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49889	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:30 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:30 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:30 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145230Z-r1755647c66bdj57qqnd8h5hp800000008vg000000004fdg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:30 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49890	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:30 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:30 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:30 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 37a0b860-701e-0001-05e6-27b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145230Z-17fbfdc98bbgm62892kdp1w19800000007ag00000000491x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:30 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49891	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:30 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:30 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: d866d412-001e-0028-1c9c-27c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145230Z-17fbfdc98bbx59j5xd9kpbrs8400000007r0000000003z49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:31 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49892	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:30 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:30 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a0fb8a5-701e-0050-6930-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145230Z-r1755647c66ljccje5cnds62nc0000000710000000001dhd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:31 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49893	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:30 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:31 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:31 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: eb17c832-b01e-0097-1249-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145231Z-r1755647c66hxv26qums8q8fsw00000006900000000068gx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:31 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49894	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:31 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:31 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145231Z-r1755647c66pzcrw3ktqe96x2s00000009d0000000006euy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:31 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49895	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:31 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:31 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 78a8beb2-e01e-0071-6ad7-2508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145231Z-17fbfdc98bbgm62892kdp1w19800000007cg000000000we2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:31 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49897	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:31 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:31 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 4e087ea8-e01e-0099-0e5a-28da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145231Z-r1755647c66hxv26qums8q8fsw000000069g000000006bw1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:32 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49898	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:31 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:31 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 207ff7bf-701e-006f-1357-27afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145231Z-17fbfdc98bb6kklk3r0qwaavtw000000064g000000005kdv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:32 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49896	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:31 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:31 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: f21e1abf-101e-00a2-2367-289f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145231Z-17fbfdc98bbdbgkb6uyh3q4ue400000007h000000000613u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:32 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49899	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:32 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:32 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 17a5a9a5-201e-0003-7b36-28f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145232Z-17fbfdc98bbsq6qfu114w62x8n000000072g000000001wcb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:32 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49900	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:32 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:32 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145232Z-r1755647c66pzcrw3ktqe96x2s00000009h000000000195v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:32 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49903	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:32 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c21b1165-c01e-008e-596f-287381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145232Z-17fbfdc98bb9xxzfyggrfrbqmw00000007m0000000000887 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49902	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:32 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145232Z-17fbfdc98bb2cvg4m0cmab3ecw00000006wg000000005en2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:33 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49901	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:32 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 08154944-901e-0083-2112-29bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145233Z-17fbfdc98bbsw6nnfh43fuwvyn00000006d0000000001462 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:33 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49904	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:33 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:33 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: ead33fc5-401e-0029-0967-289b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145233Z-r1755647c66vpf8fnbgmzm21hs0000000900000000008x58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:33 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49905	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:33 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:33 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 4bfb087f-501e-008f-4c9c-279054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145233Z-17fbfdc98bb9cv5m0pampz446s00000007h0000000007bnx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:33 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49906	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:33 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145233Z-17fbfdc98bbl4n669ut4r27e0800000007u00000000065fy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:33 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49907	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:33 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:33 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: fcac5f09-801e-007b-3f67-28e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145233Z-r1755647c66ss75qkr31zpy1kc00000007s00000000089ys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:33 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49908	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:33 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:34 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:34 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 903d1aff-701e-0050-019c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145233Z-17fbfdc98bbdbgkb6uyh3q4ue400000007mg000000003469 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:34 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49910	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:34 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:34 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:34 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 04ace5c9-101e-007a-5c26-26047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145234Z-r1755647c66p58nm9wqx75pnms00000007g00000000003zq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:34 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49909	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:34 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:34 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3a798620-501e-00a0-0295-279d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145234Z-r1755647c6688lj6g0wg0rqr1400000008f00000000020sv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:34 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49912	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:34 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:34 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 8ce6a12a-601e-005c-62fe-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145234Z-17fbfdc98bb6kklk3r0qwaavtw000000068g000000000ypd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:34 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49911	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:34 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:34 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:34 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c91d50fe-d01e-0049-5267-28e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145234Z-17fbfdc98bb2xwflv0w9dps90c00000009300000000039rb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:34 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49914	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:35 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:35 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 2a07df1e-d01e-0049-69a3-26e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145235Z-r1755647c66z4xgb5rng8h32e8000000073g000000006m2z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49918	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:35 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:35 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: cdbf2577-c01e-0034-7dc2-262af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145235Z-17fbfdc98bbbnx4ldgze4de5zs00000006r0000000006xss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49915	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:35 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 44c445c3-601e-003e-0f9c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145235Z-r1755647c668pfkhys7b5xnv2n00000008vg00000000013v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49916	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:35 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 43b0bec6-701e-0050-4289-286767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145235Z-17fbfdc98bb9xxzfyggrfrbqmw00000007cg00000000773d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49919	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:35 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:35 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 19ae2231-801e-007b-0d9c-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145235Z-17fbfdc98bbsq6qfu114w62x8n00000006w0000000008f65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49917	142.250.74.206	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:35 UTC	1337	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 661 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=JWibhpWxGkn00EGuM704BIdzAkBc46PbYA9anPZ4l0nWyrXAkhR9Kxb_cLVJFgecaS6uIcfU2iS3CzYPR4RAlJ3_E2XwjzaqsrztpRIlzqss9xFuLsdARi9iKFQYIEDA0pVZ_cCyTnadmJwPGAl_k6H5PXbBWryxLErVh-DF-0lehcOqo2jGIPgeI5M
2024-10-30 14:52:35 UTC	661	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 33 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 30 32 39 39 39 35 33 35 38 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"33",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1730299953588",null,null,n
2024-10-30 14:52:35 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 14:52:35 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 14:52:35 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 14:52:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49920	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:36 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:36 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:36 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: e871c79c-701e-005c-74c5-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145236Z-r1755647c66vkwr5neys93e0h400000007rg000000005a4a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49921	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:36 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:36 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145236Z-r1755647c66t77qv3m6k1gb3zw00000007rg000000008xkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:36 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49922	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:36 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:36 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 989b5e1d-301e-003f-2bee-25266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145236Z-r1755647c66ljccje5cnds62nc00000006z0000000004vmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:36 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49924	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:36 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:36 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:36 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 0ad7b348-901e-0067-0d67-28b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145236Z-r1755647c66vpf8fnbgmzm21hs0000000960000000002z92 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49923	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:36 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:36 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9b485842-301e-0096-2f9c-27e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145236Z-17fbfdc98bbngfjxtncsq24exs0000000a1g0000000001g3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49925	142.250.185.142	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:36 UTC	680	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=JWibhpWxGkn00EGuM704BIdzAkBc46PbYA9anPZ4l0nWyrXAkhR9Kxb_cLVJFgecaS6uIcfU2iS3CzYPR4RAlJ3_E2XwjzaqsrztpRIlzqss9xFuLsdARi9iKFQYIEDA0pVZ_cCyTnadmJwPGAl_k6H5PXbBWryxLErVh-DF-0lehcOqo2jGIPgeI5M
2024-10-30 14:52:37 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 14:52:36 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 14:52:37 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 14:52:37 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49926	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:37 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:38 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:37 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145237Z-17fbfdc98bbl4k6fkakdqzw75c00000007w0000000003nns x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:38 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49929	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:37 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:37 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145237Z-17fbfdc98bblfj7gw4f18guu2800000009k0000000006p9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:38 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49927	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:37 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:38 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:37 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 35d0191b-501e-0047-5a17-26ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145237Z-17fbfdc98bb6kklk3r0qwaavtw000000068g000000000yqp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 14:52:38 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49930	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:37 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:37 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 260950aa-801e-00a3-269d-277cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145237Z-17fbfdc98bb8mkvjfkt54wa5380000000610000000008pvx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:38 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49928	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:37 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:38 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:37 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 8055f236-801e-0083-4e87-28f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145237Z-17fbfdc98bbgnnfwq36myy7z0g00000008sg000000005rt7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:38 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49931	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:38 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:38 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: c032846d-701e-005c-2d58-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145238Z-r1755647c66tgwsmrrc4e69sk000000007c00000000084hn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:38 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49932	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:38 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:38 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145238Z-r1755647c6688lj6g0wg0rqr1400000008b0000000007kp9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:38 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49933	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:38 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:38 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 30963bf2-701e-0001-2a98-28b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145238Z-17fbfdc98bbdbgkb6uyh3q4ue400000007n0000000002q7x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:38 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49934	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:38 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:38 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: dbdc188e-001e-002b-6b28-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145238Z-17fbfdc98bblfj7gw4f18guu2800000009rg000000001hfy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:38 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49935	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:38 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:38 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:38 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 92c6748a-601e-0001-5ca3-26faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145238Z-r1755647c66p58nm9wqx75pnms00000007d00000000058e4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:38 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49936	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:39 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:39 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:39 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 4a3ae400-b01e-0001-38e4-2546e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145239Z-r1755647c666s72wx0z5rz6s600000000990000000003cps x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:39 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49937	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:39 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:39 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:39 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145239Z-17fbfdc98bb9xxzfyggrfrbqmw00000007f0000000005f84 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:39 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49938	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 14:52:39 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 14:52:39 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 14:52:39 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: b4130024-d01e-0082-10a3-26e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T145239Z-17fbfdc98bbgm62892kdp1w1980000000770000000006qrv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 14:52:39 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Target ID:	0
Start time:	10:51:19
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:51:27
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1844,i,1726855533111789611,12643351063651355907,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	10:51:31
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	10:51:44
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5316 --field-trial-handle=1844,i,1726855533111789611,12643351063651355907,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	10:51:44
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5268 --field-trial-handle=1844,i,1726855533111789611,12643351063651355907,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Windows Analysis Report
https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false